Hi Ondrej,

This appeared in the PHP changelog of the recent releases, and was
fixed in PHP embedded copy as
https://github.com/php/php-src/commit/fcd691b377d02285740744bee17c0f298be227d5
but I do not see upstream related informations or changes in the libgd
project itself.

Regards,
Salvatore

We believe that the bug you reported is fixed in the latest version of
libgd2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1143152@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ondřej Surý <ondrej@debian.org> (supplier of updated libgd2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 31 Jul 2026 07:09:41 +0200
Source: libgd2
Architecture: source
Version: 2.3.3-14
Distribution: unstable
Urgency: medium
Maintainer: GD Team <team+gd@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Closes: 1143151 1143152
Changes:
 libgd2 (2.3.3-14) unstable; urgency=medium
 .
   * Change the homepage to https://libgd.github.io (Closes: #1143151)
   * libgd patch for CVE-2026-9672 (Closes: #1143152)
Checksums-Sha1:
 d6073972c9ec9def3d8ab65f174316b2e27f2bc7 2440 libgd2_2.3.3-14.dsc
 a275344fb56161df6a06679bf0bf29c30930d8eb 3593182 libgd2_2.3.3.orig.tar.gz
 30f563aead1dfb0b7d27a4363575b75aa95e4a01 33032 libgd2_2.3.3-14.debian.tar.xz
 190dc64cc7558287f26248c58bf4553391bdcfe0 8953 libgd2_2.3.3-14_amd64.buildinfo
Checksums-Sha256:
 9ccef3efe55777d872685fefddfa50e6f0750476b1e35e4d0ba40c74165ac153 2440 libgd2_2.3.3-14.dsc
 dd3f1f0bb016edcc0b2d082e8229c822ad1d02223511997c80461481759b1ed2 3593182 libgd2_2.3.3.orig.tar.gz
 2f6f843e4cb4888f8320939326f274c45b1b17e986339c80709f2744b6b08df2 33032 libgd2_2.3.3-14.debian.tar.xz
 65bda6798f20322e114b0d0d01c924421b444a97b5d0fb35ca1524b298eeba70 8953 libgd2_2.3.3-14_amd64.buildinfo
Files:
 5afe02387432febf5cf2fed36c12a2dc 2440 graphics optional libgd2_2.3.3-14.dsc
 bf6d41ecb3148a6238a3058eb3d6224a 3593182 graphics optional libgd2_2.3.3.orig.tar.gz
 957497de689cac885842f6959c627b30 33032 graphics optional libgd2_2.3.3-14.debian.tar.xz
 a077bc04fcd28944138f361a5b0dd6f1 8953 graphics optional libgd2_2.3.3-14_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmpsMPNfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz
NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u
WcJlBhAAm7vlJ6lq+zFFB0J3i9CkluKodL63I/AQLMlD1IDAhP6k7DDjRXJBGiAP
rTOdWYz5dtTg++1iBFZ7HrVC05HWzeUQVZoy5q0zrpOF5oNAegjevP4CfOWfjy9C
1hm+9lSZY7lwibGqkakepidK3kYcoulc1IL3F7eINX7m4RErtfv9PH+EJlOoid/d
oiIFMxeln7BCcOwLA+EJXY4bhKw7rpCXB6p4uoD1GVthgiBEFkfmJ5C5h8rlfc+4
5Vf09K6FY0dmA90fHo+UIp/eBKqUw858Ms5UBnwNTLWi7qC+lJ+mh6kYUgva1mLq
QZdBm/i+kFKcW6eYkiIubOrX83QY/eCAjydK79wKLOqE6hvUvwUZg+OAuOKFZtcu
UuvPVlLu5DPa3iYKhnUalEZWLUG3crlZS6O7W3xE590nOM5yOUt1hSwTvcEW01NH
AnozlFixTBLfv4sCMVywCy2r6Xrse7B6XZiGuMXclmMiPDzdy9pCk/Y/WFu6JETU
fezntyCl4bMNOQUkyU5BYR5geL8OumpuVcUebzrrGWhi8+CQ9av/NEOO7SI1bZDv
kZoR8iVDXvH/YQ4tWieFP4VrhoxNvPQmmRWMETlLng8rB6C/sBJ/wO5OpDsjtGew
Di+8GqShbvWMAiHs9We89rNInoFMBlfz2PHQWoUTEvoEtwVbKsI=
=p2HN
-----END PGP SIGNATURE-----