[CLSA-2026:1784545335] Fix of 7 CVEs
Type:
security
Severity:
Low
Release date:
2026-07-20 11:02:53 UTC
Description:
* SECURITY UPDATE: date/time timezone memory leak (CVE-2012-0789) - debian/patches/CVE-2012-0789.patch: backport the bug #53502 hunk of upstream commit 4c9fad8b362a7d2b6a94b4961e4b2dc037b2766d so timezone lookups during date parsing go through the cached php_date_parse_tzfile_wrapper instead of allocating a fresh timelib_tzinfo on every call that was never freed. - CVE-2012-0789 * SECURITY UPDATE: magic_quotes_gpc re-enable during request startup (CVE-2012-0831) - debian/patches/php-5.2.17-bug-323016.patch: wire in the existing (but previously unapplied) upstream bug #323016 patch so magic_quotes_gpc is turned off via zend_alter_ini_entry_ex() instead of a direct PG() write while importing environment/server variables. The sapi/fpm hunk is dropped as alt-php52 does not ship the fpm SAPI. - CVE-2012-0831 * SECURITY UPDATE: phpinfo() type confusion information leak (CVE-2014-4721) - debian/patches/CVE-2014-4721.patch: backport upstream commit fb0128af2a95ec0d1a0360be49776c5b056d1f33 so phpinfo() only prints the PHP_SELF/PHP_AUTH_TYPE/PHP_AUTH_USER/PHP_AUTH_PW request variables when they are actually strings (Z_TYPE_PP(data) == IS_STRING). - CVE-2014-4721
Updated packages:
  • alt-php52_5.2.17-230_amd64.deb
    sha:eb1faf3ffc4c8145d8cbcafc0bacdb7b95f3125f
  • alt-php52-bcmath_5.2.17-230_amd64.deb
    sha:1566afd1aaa91f133e93aae5b32ab8907f2c826c
  • alt-php52-cli_5.2.17-230_amd64.deb
    sha:52436087b2b964baf006f7c787a41d99f9304fd4
  • alt-php52-common_5.2.17-230_amd64.deb
    sha:c08147a04ab8e307bcdc0c0c0b2b52794693b6d7
  • alt-php52-dba_5.2.17-230_amd64.deb
    sha:c941ebe91d733e9ed9ee7f7a00c51c74a634f557
  • alt-php52-dbx_5.2.17-230_amd64.deb
    sha:880e946de10bb0b13a52f0f14073136d6d3b189c
  • alt-php52-dev_5.2.17-230_amd64.deb
    sha:1cf39aa3cabbb5805d8ae7eeda9067bfbf8bd3e0
  • alt-php52-enchant_5.2.17-230_amd64.deb
    sha:4624ebbc38a8c5f4dbdda6fdad93ca2fc24225f7
  • alt-php52-firebird_5.2.17-230_amd64.deb
    sha:01a5800d194ccdeed39893989b446dc31f4d930b
  • alt-php52-gd_5.2.17-230_amd64.deb
    sha:0c24275c8e2a16fb1eb19863a2b0278210403eab
  • alt-php52-imap_5.2.17-230_amd64.deb
    sha:a02f291b2d3e67e90ee3724df5d87de33a84a9fb
  • alt-php52-intl_5.2.17-230_amd64.deb
    sha:1f5ef5f90b90e95d7d81080d1045471553fccc82
  • alt-php52-ldap_5.2.17-230_amd64.deb
    sha:0e7cab9643c98b852a1afbbbd16d6bf958720e3e
  • alt-php52-mbstring_5.2.17-230_amd64.deb
    sha:508b7f1ad9368dc1256ff8ceaa1a83baf56add15
  • alt-php52-mcrypt_5.2.17-230_amd64.deb
    sha:0f5dbadf7f4d73216549231caea3e8f30462aab6
  • alt-php52-mysqlnd_5.2.17-230_amd64.deb
    sha:fcfd8204130edecf195a9a13939e842ade6f09fa
  • alt-php52-odbc_5.2.17-230_amd64.deb
    sha:530553f0cd618afdcaae12c5ba50fbd6055008fb
  • alt-php52-pdo_5.2.17-230_amd64.deb
    sha:fa14dbbedf029acef47e241860066a082e093e81
  • alt-php52-pgsql_5.2.17-230_amd64.deb
    sha:a5eebf15babe137ff70026db9f536dbd5b5b137d
  • alt-php52-process_5.2.17-230_amd64.deb
    sha:6b3b758088fcf8e01a9212378ed7294d64e4d9b5
  • alt-php52-pspell_5.2.17-230_amd64.deb
    sha:5e65ae04f8bce85fbca5e1ec0c9a0e19891ab2b6
  • alt-php52-recode_5.2.17-230_amd64.deb
    sha:43fb2ceb60ed8107b932a8029a220bed3f623111
  • alt-php52-snmp_5.2.17-230_amd64.deb
    sha:595e5941b4665962ee824926c6480441848d869b
  • alt-php52-soap_5.2.17-230_amd64.deb
    sha:b4693fbb87ebcd8128a227c445f4f611092c2b34
  • alt-php52-sqlite_5.2.17-230_amd64.deb
    sha:d439699d59caeea8ee03c4b24ca347ee9c0fc2c3
  • alt-php52-sybase_5.2.17-230_amd64.deb
    sha:a06c80a2813332448af5c14f8a9f6780f1515ddc
  • alt-php52-tidy_5.2.17-230_amd64.deb
    sha:5492906a87dcd7cf9edb505eca6e05bcd47650bb
  • alt-php52-xml_5.2.17-230_amd64.deb
    sha:e27aeda5a37beb82416e65fcec6424fe33b78bf2
  • alt-php52-xmlrpc_5.2.17-230_amd64.deb
    sha:e9541ed25c4ee757a711d495dea6a713cfa2ac94
  • alt-php52_5.2.17-230_arm64.deb
    sha:9ef1a0c228c87ca5dd9b917c389e3983d6530b99
  • alt-php52-bcmath_5.2.17-230_arm64.deb
    sha:61f8ebe028e2e92353ed6c9ff879f05122d4e815
  • alt-php52-cli_5.2.17-230_arm64.deb
    sha:50c17d397b63c59cbd442642e4884395aaf508b9
  • alt-php52-common_5.2.17-230_arm64.deb
    sha:14ad19bd7a9ccd2aff5b82af7a3d0a44a8d5c65b
  • alt-php52-dba_5.2.17-230_arm64.deb
    sha:d5a56ceec7211aefde5e2685c82abb29fc418ac2
  • alt-php52-dbx_5.2.17-230_arm64.deb
    sha:d2e04e97d90144f84d39398f217d134452369dfd
  • alt-php52-dev_5.2.17-230_arm64.deb
    sha:18f3f074cd2869dc08a55613aaba998af42c7995
  • alt-php52-enchant_5.2.17-230_arm64.deb
    sha:8c9660d6a580641e6b981ed8ec07329ded3f14e6
  • alt-php52-firebird_5.2.17-230_arm64.deb
    sha:ed79aabb7298e97db8526f2ca8fe908764f7247e
  • alt-php52-gd_5.2.17-230_arm64.deb
    sha:554da8b774e513a8e2810273bd4351c6f8f4de41
  • alt-php52-imap_5.2.17-230_arm64.deb
    sha:dd3177183e4d3b4c19803bb9708cd1a2dfa82a63
  • alt-php52-intl_5.2.17-230_arm64.deb
    sha:9b3660678f8f7919e7865304edbc93e0146fcb1f
  • alt-php52-ldap_5.2.17-230_arm64.deb
    sha:e413cac79321103663ba2ea6addc3ffa40b7a24d
  • alt-php52-mbstring_5.2.17-230_arm64.deb
    sha:935fecfb9faa19e0a149382ec4921f6158e5ed7d
  • alt-php52-mcrypt_5.2.17-230_arm64.deb
    sha:acdebe2d82016d763b1e25a0d9225d650439eea8
  • alt-php52-mysqlnd_5.2.17-230_arm64.deb
    sha:92dd48045b6073551d233383be8b941eb638d39c
  • alt-php52-odbc_5.2.17-230_arm64.deb
    sha:fe6e6bb0757f14fcc3272a47cfac9ed883bdbbb9
  • alt-php52-pdo_5.2.17-230_arm64.deb
    sha:cd04ef9367bac2499830e456bcf406788446bd88
  • alt-php52-pgsql_5.2.17-230_arm64.deb
    sha:66fdecb0bf8430a8e194eeda7aef3fc34c7578a8
  • alt-php52-process_5.2.17-230_arm64.deb
    sha:678c95071a3a9394ad8ae2d10e4302459314c951
  • alt-php52-pspell_5.2.17-230_arm64.deb
    sha:f956365c1d1342a6e37fb349d2d0e9a958c005c9
  • alt-php52-recode_5.2.17-230_arm64.deb
    sha:70a0c8182f52332b188968e88b476fb4366489bd
  • alt-php52-snmp_5.2.17-230_arm64.deb
    sha:132ea7efa6bf3c0fa3450e29b68cb858cf1ef158
  • alt-php52-soap_5.2.17-230_arm64.deb
    sha:8927034ec702df987dce6f2bcf0f1755bd167c70
  • alt-php52-sqlite_5.2.17-230_arm64.deb
    sha:ffc2ce8752255b19c477294ce4f893fd81eee447
  • alt-php52-sybase_5.2.17-230_arm64.deb
    sha:03c8f8e0dc920e0f60c565e6a943c5c3edb258e8
  • alt-php52-tidy_5.2.17-230_arm64.deb
    sha:2db702e725c458becbc7bf49aa5ed9154ef3c1a8
  • alt-php52-xml_5.2.17-230_arm64.deb
    sha:dd5634391f548d1209e9312a9d323e3ab7b8334a
  • alt-php52-xmlrpc_5.2.17-230_arm64.deb
    sha:074bf4a481de3c41492232605c00bc9d573530e5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.