[CLSA-2026:1786358976] alt-php71: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-10 10:49:48 UTC
Description:
- CVE-2026-9672: fix three defects in the bundled libgd GIF LZW decoder (ext/gd/libgd/gd_gif_in.c) - reset sd->table[1][i] instead of sd->table[1][0], stop decoding after the LZW end code, and zero-initialise LZW_STATIC_DATA in ReadImage() (backport of upstream fcd691b377d02285740744bee17c0f298be227d5) - CVE-2026-17543: fix SQL injection in ext/pgsql - php_pgsql_add_quotes() emitted E'...' while PQescapeStringConn() only doubles the quote, letting a trailing backslash break out of the literal (backport of upstream ab048bd83b578119cf81b456526d50498421d617) - CVE-2026-7260: fix phar circular symlink crash - phar_get_link_source() now follows the link chain with Floyd cycle detection instead of unbounded self-recursion, and phar_get_link_location() restores the path separator it temporarily overwrites (backport of upstream 2e0fa0a44441d74bf8cc4e1ce1c8af9cd4209f52)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-102.el8.x86_64.rpm
    sha:23cec361c19de03a4a6d7d025654062cbf39c8adf4dac010c77ae8fa5150b6da
  • alt-php71-bcmath-7.1.33-102.el8.x86_64.rpm
    sha:8cb92d6b1bc5dd49369b979fc3f56a032d90ed6efdd930768c575e9d2459b350
  • alt-php71-cli-7.1.33-102.el8.x86_64.rpm
    sha:9c301e9074290fc17c54c903fd87d0b06f800b5dee298826b26c013ee6f92761
  • alt-php71-common-7.1.33-102.el8.x86_64.rpm
    sha:1ab483747d577c84b790475ef5ea9271251c17bdab41b8e3ea6a1a3cbe10b681
  • alt-php71-dba-7.1.33-102.el8.x86_64.rpm
    sha:e15c0e9027287ac41c223474a879d675ebc3a8004c11e319d809f0117ac824c3
  • alt-php71-devel-7.1.33-102.el8.x86_64.rpm
    sha:377173d21beccbe3fca9b4ea909fa294a609d9833bd4506b3e3f8e0996d65efe
  • alt-php71-enchant-7.1.33-102.el8.x86_64.rpm
    sha:c8546c656dd68e7bfbb64cfdca39f064bbc368999a2af2fdcdeecf280f907a05
  • alt-php71-firebird-7.1.33-102.el8.x86_64.rpm
    sha:9e35e3ff396a9866efb9b0902b47cbc3ee0fa106b4232700f29b1eadefe7c561
  • alt-php71-gd-7.1.33-102.el8.x86_64.rpm
    sha:17e168ae53a0e0aa35cde8b6603487fa9b8faa2e78bc5b2fb9bdd10f489663aa
  • alt-php71-imap-7.1.33-102.el8.x86_64.rpm
    sha:7b5d1af217ebd1a86f0bfec353d5e310230157a57429d5d1583edf5f3f9c2e63
  • alt-php71-intl-7.1.33-102.el8.x86_64.rpm
    sha:9f62f9f3aef2c6a8b5c7013eed2371efd454ed08329f538d2a1df73c4d233feb
  • alt-php71-ldap-7.1.33-102.el8.x86_64.rpm
    sha:c2b3f115c9f9ecdc29c4c5fdfadd233f65f1ce430bf01a9ae4e2aee5e2342f27
  • alt-php71-mbstring-7.1.33-102.el8.x86_64.rpm
    sha:71e779476fa42ed02235ec02dd20fa31599a2d81a8f7bcdca5b525b4d3afe1a1
  • alt-php71-mcrypt-7.1.33-102.el8.x86_64.rpm
    sha:1d4e01db119b8f164a11e9865e6f3d91505251926793220bffac6d4a792c49a6
  • alt-php71-mysqlnd-7.1.33-102.el8.x86_64.rpm
    sha:a011dac88cfffca7238fc7182f63f15439d8a61ea3271c2f345bbb2a60f47067
  • alt-php71-odbc-7.1.33-102.el8.x86_64.rpm
    sha:9882f3e3e6bcb2184b6c8f5a6a422db991bde36ab98f11870ba70f523e910fb9
  • alt-php71-opcache-7.1.33-102.el8.x86_64.rpm
    sha:026cf65f1bc9ad7ef4ab484231d3d898ff61bc7f6aaaac5ef0bbbcce1954c71d
  • alt-php71-pdo-7.1.33-102.el8.x86_64.rpm
    sha:142b21a714a35b404f75424c191789e28f43a0cecce997ce8b3d5ef789d6dffa
  • alt-php71-pgsql-7.1.33-102.el8.x86_64.rpm
    sha:2cae721298edd15d262184b2125519a0df5bcb6e0cc553c74d80159704d2b73d
  • alt-php71-php-fpm-7.1.33-102.el8.x86_64.rpm
    sha:f81339ff098d0e1b93a0f7b3d8d5dd37f403dc461116e96eb50669cb9227d394
  • alt-php71-process-7.1.33-102.el8.x86_64.rpm
    sha:f8b64e84cf79cf83869e81004479cc8816c24ca5da920ca00d588c60f4efd3cd
  • alt-php71-pspell-7.1.33-102.el8.x86_64.rpm
    sha:abc018f869e8edb787cf693fbbf6294b66406e64ef5af92daf55bcf3b98d76dc
  • alt-php71-recode-7.1.33-102.el8.x86_64.rpm
    sha:d55e50370ee98d6bdb988361984f1ed8d35d86b3d4daf988fd0089b219b1caf3
  • alt-php71-snmp-7.1.33-102.el8.x86_64.rpm
    sha:2542b727c0298298765c5fe91da62ad7de2d5b23c0950b9272c4eaef01584173
  • alt-php71-soap-7.1.33-102.el8.x86_64.rpm
    sha:48ee5eb495c197fcb650bec01ad3d0c0c2f34a741eba662b78abb49f00f9dc20
  • alt-php71-tidy-7.1.33-102.el8.x86_64.rpm
    sha:c073695c33ca60cfd5af95a2057f8f2e41086c15f8cddf3fe6d9a49abb1f828f
  • alt-php71-xml-7.1.33-102.el8.x86_64.rpm
    sha:07e608574db91a67a11d95424f0a23196982d0440a3a8d39b44e2cf933aa9a57
  • alt-php71-xmlrpc-7.1.33-102.el8.x86_64.rpm
    sha:cef034f3e2738f1894344e56432012c8b6d362de33dafb4ca51485d954a3d848
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.