/ Register

Welcome to Centmin Mod Community
Become a Member

Beta Branch backport CVE-2026-9672 fix to external libgd 2.3.3 in 140.00beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 21, 2026 at 10:34 AM.

Previous Thread Next Thread
Loading...
  1. Oct 21, 2026 at 10:34 AM #1
    eva2000

    eva2000 Administrator Staff Member

    59,950
    12,556
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,201
    Local Time:
    5:09 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    backport CVE-2026-9672 fix to external libgd 2.3.3 in 140.00beta01

    PHP's CVE-2026-9672 fix only covers its bundled libgd. PHP builds with
    PHP_LIBGD_EXTERNAL='y' (the EL8/EL9 default) link Centmin Mod's own
    libgd 2.3.3 instead, and no libgd release includes the fix yet.

    Changes:
    - patches/libgd/libgd-2.3.3-cve-2026-9672.patch: GIF LZW decoder fix for
    src/gd_gif_in.c, backported from php-src commit fcd691b377d0
    - php_configure.inc: apply the patch in install_libgd_external after the
    gdflip patch, and stop the PHP build if it does not apply
    - the fix takes effect on the next PHP build via centmin.sh menu 5

    Continue reading...

    140.00beta01 branch

     
Previous Thread Next Thread
Loading...

.