Release date:
2026-08-27 11:07:08 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder - the table reset cleared
sd->table[1][0] instead of sd->table[1][i] so stale suffixes leaked between
images, LWZReadByte_() kept decoding after the LZW end code when the trailing
data block count was 0, and ReadImage() left LZW_STATIC_DATA uninitialised
- CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped
PQescapeStringConn() output in an E'...' literal, which lets a trailing
backslash escape the closing quote while standard_conforming_strings is on.
Emit a plain '...' literal instead
- CVE-2026-7260: unbounded recursion in phar_get_link_source() on a circular
symlink chain (GHSA-vc5h-9ppw-p5f3); replaced by a Floyd cycle-detection walk,
including the phar_get_link_location() path-separator restore the walk needs
Updated packages:
-
alt-php72-7.2.34-86.el6.x86_64.rpm
sha:9d17af726a6c922fd43745bdb1132cbe755e949bce6bfa7b0811b6b836a6779a
-
alt-php72-bcmath-7.2.34-86.el6.x86_64.rpm
sha:ec29fee6c041dbc7c1012acbd048b7c6b5f94d6e3a776903cdfea4856ae8f8ce
-
alt-php72-cli-7.2.34-86.el6.x86_64.rpm
sha:c24c3e309e25faa4af70e8b9446b765cc9ad7cd6264339b7dbfec54c1bb14685
-
alt-php72-common-7.2.34-86.el6.x86_64.rpm
sha:b8e7cedcd725c602142e00ab567a30a535b1ce6c2ca4f651220794c55006f2d3
-
alt-php72-dba-7.2.34-86.el6.x86_64.rpm
sha:906fc37eb5d24aa1c54f6f790cc9375b11600bbb68ea001b8f4e7fecb717f599
-
alt-php72-devel-7.2.34-86.el6.x86_64.rpm
sha:d0515611903ab88fe71194b06db0f2cd32fabb8d164647a945d021a2d23d08bc
-
alt-php72-enchant-7.2.34-86.el6.x86_64.rpm
sha:c48fcb5889d81cbb382f8bfd04405cf197ff6252ed3cd6f41d42bf150eb2c692
-
alt-php72-firebird-7.2.34-86.el6.x86_64.rpm
sha:8ae6f8864b1fe3683fa96c982abef79c70a57150f5ed781da363660253387d71
-
alt-php72-gd-7.2.34-86.el6.x86_64.rpm
sha:0aeec1370136c2e53d1235a567038c439c57c8f3ce474e8a612cf258491cf227
-
alt-php72-imap-7.2.34-86.el6.x86_64.rpm
sha:43bfe891995582909afc263efb5d1881eeaf40ff13da881767fbe21cce79f6cf
-
alt-php72-intl-7.2.34-86.el6.x86_64.rpm
sha:43b79029318e9736f4be0677f48a2d8070924c8b26e46ca5bc653ba10cd260a0
-
alt-php72-ldap-7.2.34-86.el6.x86_64.rpm
sha:5d62c9c0159560f2703e4b21e481ec95fa058f63ed8d0901a9580f170cdf219d
-
alt-php72-mbstring-7.2.34-86.el6.x86_64.rpm
sha:80a96bcae443cf2e7d428abb12c430566564549143c8ce5a0c973ba3ba54267f
-
alt-php72-mysqlnd-7.2.34-86.el6.x86_64.rpm
sha:830f5d1a9c4793d88a93858cb4dae9bef70b22e6ac8339083dd083ead6f94e45
-
alt-php72-odbc-7.2.34-86.el6.x86_64.rpm
sha:288d2222bcc2bf12a088e06abe11bdf569c8bfb82d2d1412c812eccfa13d3eba
-
alt-php72-opcache-7.2.34-86.el6.x86_64.rpm
sha:69b1df37f4ce8168f6c09ce4bc045db2959cb6c5aafb837024772ee7077b0a00
-
alt-php72-pdo-7.2.34-86.el6.x86_64.rpm
sha:7d2266fa1333d80145f97ef1fc43c09d72147de95131bfc52a2e233812a32ef8
-
alt-php72-pgsql-7.2.34-86.el6.x86_64.rpm
sha:012c15f6e35d94aa389aa27ddc57492b99233ec335d5751f28c4442b62e45c2d
-
alt-php72-php-fpm-7.2.34-86.el6.x86_64.rpm
sha:09af252b4c9f6c657d10ac2b8c61874bda1eb1d10a4c39661d8b548baa542b49
-
alt-php72-process-7.2.34-86.el6.x86_64.rpm
sha:035492184bf3b72557b1d90ea843e8797d7fc866db9f1e0909fbed976471633a
-
alt-php72-pspell-7.2.34-86.el6.x86_64.rpm
sha:24cec5994480981b0da3de768a3a5527f360cbdb279f07bdc8bd127d699ee7c6
-
alt-php72-recode-7.2.34-86.el6.x86_64.rpm
sha:0a4de130fe80124b5a9e4958649cd26d81acf36fe6d4f198779fe35c7b10190a
-
alt-php72-snmp-7.2.34-86.el6.x86_64.rpm
sha:8c13b6059b9b07f001f5e7e1d7c4da06df720bf4d81f7f8684932f5a8f48c457
-
alt-php72-soap-7.2.34-86.el6.x86_64.rpm
sha:8a5a5b7f6c50319d535f5ee3a9a89cc0ac62f7c8b26eb340c81727ccb35e4346
-
alt-php72-sodium-7.2.34-86.el6.x86_64.rpm
sha:beed28deb0192d178ab8ddb4aed075ce47816fa3c397ace49ef6a5852f20d593
-
alt-php72-tidy-7.2.34-86.el6.x86_64.rpm
sha:2b32675243f9e51e5f2fb0dca4930783d789231ec0d0573f2e3188c9557f5ea4
-
alt-php72-xml-7.2.34-86.el6.x86_64.rpm
sha:f435b4dea7e3dbc2e720871ec59558b0e0ccd7b9dc55b108a4c9de18d611b72d
-
alt-php72-xmlrpc-7.2.34-86.el6.x86_64.rpm
sha:18bae5b72325fdbb9f320f0d07f7c9906067f69b3a5e837288bbf4cab58403a6
-
alt-php72-zts-7.2.34-86.el6.x86_64.rpm
sha:dd00f0c92edea4ce11acb230fc2355e50c7f62665b4860dbbb28c5b6f4937999
-
alt-php72-zts-devel-7.2.34-86.el6.x86_64.rpm
sha:1d58ce87ddc7926cfb51f94eb30e52cb9c989fca6bf1e7553eaed32bb3e86564
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.