Release date:
2026-08-11 11:49:28 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder - the table reset cleared
sd->table[1][0] instead of sd->table[1][i] so stale suffixes leaked between
images, LWZReadByte_() kept decoding after the LZW end code when the trailing
data block count was 0, and ReadImage() left LZW_STATIC_DATA uninitialised
- CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped
PQescapeStringConn() output in an E'...' literal, which lets a trailing
backslash escape the closing quote while standard_conforming_strings is on.
Emit a plain '...' literal instead
- CVE-2026-7260: unbounded recursion in phar_get_link_source() on a circular
symlink chain (GHSA-vc5h-9ppw-p5f3); replaced by a Floyd cycle-detection walk,
including the phar_get_link_location() path-separator restore the walk needs
Updated packages:
-
alt-php72-7.2.34-86.el8.x86_64.rpm
sha:af1e853e7298437374a5863748a13fc7785a37807b58a05f54ae0d172637949e
-
alt-php72-bcmath-7.2.34-86.el8.x86_64.rpm
sha:958c591ab5e12f02ffcdd8df979f02f5f201b8a8e872784f7cf40a749e27afb8
-
alt-php72-cli-7.2.34-86.el8.x86_64.rpm
sha:a98d99aa7424df53d2b879480cea7d3d2c25f60ed5b5febcc8c9905701c7357a
-
alt-php72-common-7.2.34-86.el8.x86_64.rpm
sha:4a64283659894ea4f03f4ae33796ad7fb2a517780f4176e2c94d1448fe94bb2f
-
alt-php72-dba-7.2.34-86.el8.x86_64.rpm
sha:2a7a2a0f5c2529d718d4ba4f87c4078551b0a93d88b143e951991afacf88c842
-
alt-php72-devel-7.2.34-86.el8.x86_64.rpm
sha:9bb2527e1bdf5374d331a261081e6edde8bbd2b5091e57fadc16e3b981bc2323
-
alt-php72-enchant-7.2.34-86.el8.x86_64.rpm
sha:5a31e1ed809df7ecf95053594f22c737dda5504dcacaa7867cb8c129bd5e14c0
-
alt-php72-firebird-7.2.34-86.el8.x86_64.rpm
sha:25c23116bf7bd3e0c8b166adfb2c4e9f0fb863501b14cdadbc789483c1f2f770
-
alt-php72-gd-7.2.34-86.el8.x86_64.rpm
sha:adc824488f3015f4f2d33ced78b5fc583968276f6ca1ca80396ea5eb6972bd4d
-
alt-php72-imap-7.2.34-86.el8.x86_64.rpm
sha:baf6ec36c34407bb959a26a3a79a0ce0602cdd39a209efe271668940792b831e
-
alt-php72-intl-7.2.34-86.el8.x86_64.rpm
sha:4eec62e1c8951302f1be8f138dcbd92e940adfa3b5f8e5c10ab8a2fb44d2bee5
-
alt-php72-ldap-7.2.34-86.el8.x86_64.rpm
sha:90f532785a7bf817a5865cd122bd4fb11661c08983fcaacb3bdab16836963b5b
-
alt-php72-mbstring-7.2.34-86.el8.x86_64.rpm
sha:11728828041b776d129b038a72f999c3e634448a9cf059f835d2c5e15ff4812d
-
alt-php72-mysqlnd-7.2.34-86.el8.x86_64.rpm
sha:dc68cc9d75abad95a534dbae5dee238b502971f5de97008b0e8ee509866fb55c
-
alt-php72-odbc-7.2.34-86.el8.x86_64.rpm
sha:dacdef9b341206d0f01dea3a782d29f98262c84fe7d5f2c2dc1dc112568e9029
-
alt-php72-opcache-7.2.34-86.el8.x86_64.rpm
sha:d4c7c55cab34847a034f83269c0fe9c7514f4893d656463f6e051734b48067e1
-
alt-php72-pdo-7.2.34-86.el8.x86_64.rpm
sha:78d1421155e32b0744beed621fe79fa2eab2850f7f483afece040afc3fe80cfd
-
alt-php72-pgsql-7.2.34-86.el8.x86_64.rpm
sha:f8c55608ce440a3408aaa40072b1aa6d7bf4419841760de58b6c9f3f4c5283b9
-
alt-php72-php-fpm-7.2.34-86.el8.x86_64.rpm
sha:5871b783d499c679a60410e5f1f4dc73441a29b04857987a6fba108310e17679
-
alt-php72-process-7.2.34-86.el8.x86_64.rpm
sha:33d548778ebad5aeed099cce6a240456f707b38bda5a2a1f7b1ec642c86bde9f
-
alt-php72-pspell-7.2.34-86.el8.x86_64.rpm
sha:1f890867680c26e26ad89a9de24d4a87a829ff7a87ae7cf0c8cf153b021297ea
-
alt-php72-recode-7.2.34-86.el8.x86_64.rpm
sha:39a47ffd7cd207dcf61f5d01a29ded15ba3333552babe6a880c0933b358f623d
-
alt-php72-snmp-7.2.34-86.el8.x86_64.rpm
sha:5d841ca90dee84c31337827a987d6c19cc9982648895e6ccb8d7711d18a9af91
-
alt-php72-soap-7.2.34-86.el8.x86_64.rpm
sha:c960288e0e848f92818d8ba1fa504fc5b8a0acd4d27568055c396b487e14d8a4
-
alt-php72-sodium-7.2.34-86.el8.x86_64.rpm
sha:8d90a4c5aa6f5d8e974e74f7ff580930e2379592b6d64d02511280130ae47a74
-
alt-php72-tidy-7.2.34-86.el8.x86_64.rpm
sha:f758aa32b42187c90b15037244161f602b549eb8602aad48863d6ba99c69a73f
-
alt-php72-xml-7.2.34-86.el8.x86_64.rpm
sha:8e77be5ac3df3cb59a5cc0a01a671897de383530441431befd2db4707e49d060
-
alt-php72-xmlrpc-7.2.34-86.el8.x86_64.rpm
sha:0d7c14770c27003c755913073706d7ab8e157bcc906ba6454c4ce2ff9e001d4f
-
alt-php72-zts-7.2.34-86.el8.x86_64.rpm
sha:f15bcdd3c6eeedb1e9c47dafad3aa35b3f99887037df9b7fa8c053b0ece19538
-
alt-php72-zts-devel-7.2.34-86.el8.x86_64.rpm
sha:9924857008ee8ff22bf83901c200ab0021fc5c96bef6dfdc6a035c44bbd97635
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.