[CLSA-2026:1787828815] alt-php72: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-27 11:07:08 UTC
Description:
- CVE-2026-9672: bundled libgd GIF LZW decoder - the table reset cleared sd->table[1][0] instead of sd->table[1][i] so stale suffixes leaked between images, LWZReadByte_() kept decoding after the LZW end code when the trailing data block count was 0, and ReadImage() left LZW_STATIC_DATA uninitialised - CVE-2026-17543: SQL injection in ext/pgsql - php_pgsql_add_quotes() wrapped PQescapeStringConn() output in an E'...' literal, which lets a trailing backslash escape the closing quote while standard_conforming_strings is on. Emit a plain '...' literal instead - CVE-2026-7260: unbounded recursion in phar_get_link_source() on a circular symlink chain (GHSA-vc5h-9ppw-p5f3); replaced by a Floyd cycle-detection walk, including the phar_get_link_location() path-separator restore the walk needs
Updated packages:
  • alt-php72-7.2.34-86.el6.x86_64.rpm
    sha:9d17af726a6c922fd43745bdb1132cbe755e949bce6bfa7b0811b6b836a6779a
  • alt-php72-bcmath-7.2.34-86.el6.x86_64.rpm
    sha:ec29fee6c041dbc7c1012acbd048b7c6b5f94d6e3a776903cdfea4856ae8f8ce
  • alt-php72-cli-7.2.34-86.el6.x86_64.rpm
    sha:c24c3e309e25faa4af70e8b9446b765cc9ad7cd6264339b7dbfec54c1bb14685
  • alt-php72-common-7.2.34-86.el6.x86_64.rpm
    sha:b8e7cedcd725c602142e00ab567a30a535b1ce6c2ca4f651220794c55006f2d3
  • alt-php72-dba-7.2.34-86.el6.x86_64.rpm
    sha:906fc37eb5d24aa1c54f6f790cc9375b11600bbb68ea001b8f4e7fecb717f599
  • alt-php72-devel-7.2.34-86.el6.x86_64.rpm
    sha:d0515611903ab88fe71194b06db0f2cd32fabb8d164647a945d021a2d23d08bc
  • alt-php72-enchant-7.2.34-86.el6.x86_64.rpm
    sha:c48fcb5889d81cbb382f8bfd04405cf197ff6252ed3cd6f41d42bf150eb2c692
  • alt-php72-firebird-7.2.34-86.el6.x86_64.rpm
    sha:8ae6f8864b1fe3683fa96c982abef79c70a57150f5ed781da363660253387d71
  • alt-php72-gd-7.2.34-86.el6.x86_64.rpm
    sha:0aeec1370136c2e53d1235a567038c439c57c8f3ce474e8a612cf258491cf227
  • alt-php72-imap-7.2.34-86.el6.x86_64.rpm
    sha:43bfe891995582909afc263efb5d1881eeaf40ff13da881767fbe21cce79f6cf
  • alt-php72-intl-7.2.34-86.el6.x86_64.rpm
    sha:43b79029318e9736f4be0677f48a2d8070924c8b26e46ca5bc653ba10cd260a0
  • alt-php72-ldap-7.2.34-86.el6.x86_64.rpm
    sha:5d62c9c0159560f2703e4b21e481ec95fa058f63ed8d0901a9580f170cdf219d
  • alt-php72-mbstring-7.2.34-86.el6.x86_64.rpm
    sha:80a96bcae443cf2e7d428abb12c430566564549143c8ce5a0c973ba3ba54267f
  • alt-php72-mysqlnd-7.2.34-86.el6.x86_64.rpm
    sha:830f5d1a9c4793d88a93858cb4dae9bef70b22e6ac8339083dd083ead6f94e45
  • alt-php72-odbc-7.2.34-86.el6.x86_64.rpm
    sha:288d2222bcc2bf12a088e06abe11bdf569c8bfb82d2d1412c812eccfa13d3eba
  • alt-php72-opcache-7.2.34-86.el6.x86_64.rpm
    sha:69b1df37f4ce8168f6c09ce4bc045db2959cb6c5aafb837024772ee7077b0a00
  • alt-php72-pdo-7.2.34-86.el6.x86_64.rpm
    sha:7d2266fa1333d80145f97ef1fc43c09d72147de95131bfc52a2e233812a32ef8
  • alt-php72-pgsql-7.2.34-86.el6.x86_64.rpm
    sha:012c15f6e35d94aa389aa27ddc57492b99233ec335d5751f28c4442b62e45c2d
  • alt-php72-php-fpm-7.2.34-86.el6.x86_64.rpm
    sha:09af252b4c9f6c657d10ac2b8c61874bda1eb1d10a4c39661d8b548baa542b49
  • alt-php72-process-7.2.34-86.el6.x86_64.rpm
    sha:035492184bf3b72557b1d90ea843e8797d7fc866db9f1e0909fbed976471633a
  • alt-php72-pspell-7.2.34-86.el6.x86_64.rpm
    sha:24cec5994480981b0da3de768a3a5527f360cbdb279f07bdc8bd127d699ee7c6
  • alt-php72-recode-7.2.34-86.el6.x86_64.rpm
    sha:0a4de130fe80124b5a9e4958649cd26d81acf36fe6d4f198779fe35c7b10190a
  • alt-php72-snmp-7.2.34-86.el6.x86_64.rpm
    sha:8c13b6059b9b07f001f5e7e1d7c4da06df720bf4d81f7f8684932f5a8f48c457
  • alt-php72-soap-7.2.34-86.el6.x86_64.rpm
    sha:8a5a5b7f6c50319d535f5ee3a9a89cc0ac62f7c8b26eb340c81727ccb35e4346
  • alt-php72-sodium-7.2.34-86.el6.x86_64.rpm
    sha:beed28deb0192d178ab8ddb4aed075ce47816fa3c397ace49ef6a5852f20d593
  • alt-php72-tidy-7.2.34-86.el6.x86_64.rpm
    sha:2b32675243f9e51e5f2fb0dca4930783d789231ec0d0573f2e3188c9557f5ea4
  • alt-php72-xml-7.2.34-86.el6.x86_64.rpm
    sha:f435b4dea7e3dbc2e720871ec59558b0e0ccd7b9dc55b108a4c9de18d611b72d
  • alt-php72-xmlrpc-7.2.34-86.el6.x86_64.rpm
    sha:18bae5b72325fdbb9f320f0d07f7c9906067f69b3a5e837288bbf4cab58403a6
  • alt-php72-zts-7.2.34-86.el6.x86_64.rpm
    sha:dd00f0c92edea4ce11acb230fc2355e50c7f62665b4860dbbb28c5b6f4937999
  • alt-php72-zts-devel-7.2.34-86.el6.x86_64.rpm
    sha:1d58ce87ddc7926cfb51f94eb30e52cb9c989fca6bf1e7553eaed32bb3e86564
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.