[CLSA-2026:1784308084] alt-php52: Fix of 7 CVEs
Type:
security
Severity:
Low
Release date:
2026-07-17 17:08:44 UTC
Description:
- CVE-2012-0789: memory leak in the date/time extension - parsing a date string with an embedded timezone identifier (e.g. strtotime with "Europe/Paris") allocated a fresh timelib_tzinfo on every call that was never freed, letting a remote attacker exhaust memory; timezone lookups now go through the cached php_date_parse_tzfile_wrapper (upstream bug - CVE-2012-0831: magic_quotes_gpc could be re-enabled during request startup because it was reset with a direct PG() write instead of going through the INI subsystem while importing environment/server variables; now switched off via zend_alter_ini_entry_ex() (upstream bug #323016; the fpm SAPI hunk is dropped as 5.2 ships no fpm) - CVE-2014-4721: phpinfo() type confusion / information leak - the PHP_SELF, PHP_AUTH_TYPE, PHP_AUTH_USER and PHP_AUTH_PW request variables were printed with Z_STRVAL_PP() without a type check; each lookup now also requires Z_TYPE_PP(data) == IS_STRING (upstream bug #67498)
CVEs fixed:
Updated packages:
  • alt-php52-5.2.17-231.el6.x86_64.rpm
    sha:50370b850f7315da6208260f7184211e0ec848af6a0bd867b9ed84e3fb783dc6
  • alt-php52-bcmath-5.2.17-231.el6.x86_64.rpm
    sha:2d96bff0639691b0ed33165b2d8aaf3aa7302a0e2a5962e32295c8a90b9956d7
  • alt-php52-cli-5.2.17-231.el6.x86_64.rpm
    sha:447859c461e05e2baf22d8fdf935d3cf3e71cbb551b213b287eecb6373a9e912
  • alt-php52-common-5.2.17-231.el6.x86_64.rpm
    sha:ba01820115c9c57eb6a1066fd4508d9526246d5f5c85c8644e0fd06478c0ce28
  • alt-php52-dba-5.2.17-231.el6.x86_64.rpm
    sha:5bacbf3a871ac052ed1d6055ffb11a24da464ef4e194e1221074d3e4984f2810
  • alt-php52-dbx-5.2.17-231.el6.x86_64.rpm
    sha:8d6ffcd55dc927baebfac545d2243f6e85f53a399e40dbae9b308188e2787172
  • alt-php52-devel-5.2.17-231.el6.x86_64.rpm
    sha:de92e1d69bfb5fa7e398746bad652b95347e15b5f2f294de5ae4928ede3610aa
  • alt-php52-enchant-5.2.17-231.el6.x86_64.rpm
    sha:3cf0042090144a37b0036fdd4e137e8aab42c413e201f9954858d795506378db
  • alt-php52-firebird-5.2.17-231.el6.x86_64.rpm
    sha:c53a9da28e0d844c6dac8c74f36c05a23ac9c4300f5128f940c5c3e40092defd
  • alt-php52-gd-5.2.17-231.el6.x86_64.rpm
    sha:c8fda72af687403e839995babd76bd045c74e6b28c8e8b0e06d2a483052f5784
  • alt-php52-imap-5.2.17-231.el6.x86_64.rpm
    sha:5ead61884d6a85e83bf220d8da29a2a1180cf83d0bf36179a1b930869bfe40b8
  • alt-php52-intl-5.2.17-231.el6.x86_64.rpm
    sha:3a552d1bcc22ff47e2ecd58cfc3e11ac6bacfbe8261714093f91fd132b689760
  • alt-php52-ldap-5.2.17-231.el6.x86_64.rpm
    sha:a8591abef6a6bca8437d30d18754e2c010f3136f1ff92f9de9e5844cf5e5caf0
  • alt-php52-mbstring-5.2.17-231.el6.x86_64.rpm
    sha:ddcf75a8e61a60d2cf06c33bc4ecdc2f3e61821049e34b70086b2895b97e7bd7
  • alt-php52-mcrypt-5.2.17-231.el6.x86_64.rpm
    sha:77a6a925b401c5da7b582267ad613599ce6187ec4dc82a2ba8ca6e8ac14ae9e8
  • alt-php52-mssql-5.2.17-231.el6.x86_64.rpm
    sha:bb7cac8a2d9fbf4f75f63752a89cfdeca5b49e532aaebfd2e56af4283758ef1d
  • alt-php52-ncurses-5.2.17-231.el6.x86_64.rpm
    sha:bc3ba76bcdf9f19baa264f625bcc63a8dec751e30862a32866174ef681e3bc69
  • alt-php52-odbc-5.2.17-231.el6.x86_64.rpm
    sha:816b9d84f1c5c57264c57ad9c91fc96b2540d00987cb4cdddbc375b86477a714
  • alt-php52-pdo-5.2.17-231.el6.x86_64.rpm
    sha:832bc6c5b718b45c36fea2784951debe190cb1cf6ed2e43fd93c5116a8bc8a08
  • alt-php52-pgsql-5.2.17-231.el6.x86_64.rpm
    sha:87c09175166531e054c92dbb3bf3b8c8eab3e69c7a41a836cda34b4051fb33d5
  • alt-php52-process-5.2.17-231.el6.x86_64.rpm
    sha:cc74966b573082e0aa5c62f3a77d9a1a63c817dfab458430b1c575935f76ab8f
  • alt-php52-pspell-5.2.17-231.el6.x86_64.rpm
    sha:3ffbd34d8e1bd40ca2e455335fa712ca3711450ffb41c9392dfcca34c098959a
  • alt-php52-recode-5.2.17-231.el6.x86_64.rpm
    sha:4af607b66fe82fb4a263bd178dd217baa2db04e62b95f075647eb09ab20f7b38
  • alt-php52-snmp-5.2.17-231.el6.x86_64.rpm
    sha:df9fc70ed4e5d55df627be7d90fea88a93a7ebc2cfbb1bb4012a97b5da9bf302
  • alt-php52-soap-5.2.17-231.el6.x86_64.rpm
    sha:94c66bfa195246fb56044ffdb51551c8e0cf42fa5635506dfe147c6a9bdac273
  • alt-php52-sqlite-5.2.17-231.el6.x86_64.rpm
    sha:e57c5414a029bc5ec838da63c8b0e95cf3f0cb55b43a3031ae11852fe766077b
  • alt-php52-sybase-5.2.17-231.el6.x86_64.rpm
    sha:22a594e9207f1720794917c6afe09e44153d52ed41437ced031765ed794a0800
  • alt-php52-tidy-5.2.17-231.el6.x86_64.rpm
    sha:e9077e5ad133ca3bc67c3cbe1384b9839ca96ec90e5acd5a4d0c8fcbddd6f9ac
  • alt-php52-xml-5.2.17-231.el6.x86_64.rpm
    sha:7f640a01fe38266cf2e61a348a1b2f9fa10b6867731fddfc68d7e40eb4aa4c0d
  • alt-php52-xmlrpc-5.2.17-231.el6.x86_64.rpm
    sha:6e714acf11cf6a0c362c0e0c2228a6b2e0ce7cc46ec85ee634f8ead52dc2dc65
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.