Release date:
2026-07-20 10:04:47 UTC
Description:
* SECURITY UPDATE: date/time timezone memory leak (CVE-2012-0789)
- debian/patches/CVE-2012-0789.patch: backport the bug #53502 hunk of
upstream commit 4c9fad8b362a7d2b6a94b4961e4b2dc037b2766d so timezone
lookups during date parsing go through the cached
php_date_parse_tzfile_wrapper instead of allocating a fresh
timelib_tzinfo on every call that was never freed.
- CVE-2012-0789
* SECURITY UPDATE: magic_quotes_gpc re-enable during request startup
(CVE-2012-0831)
- debian/patches/php-5.2.17-bug-323016.patch: wire in the existing (but
previously unapplied) upstream bug #323016 patch so magic_quotes_gpc is
turned off via zend_alter_ini_entry_ex() instead of a direct PG() write
while importing environment/server variables. The sapi/fpm hunk is
dropped as alt-php52 does not ship the fpm SAPI.
- CVE-2012-0831
* SECURITY UPDATE: phpinfo() type confusion information leak (CVE-2014-4721)
- debian/patches/CVE-2014-4721.patch: backport upstream commit
fb0128af2a95ec0d1a0360be49776c5b056d1f33 so phpinfo() only prints the
PHP_SELF/PHP_AUTH_TYPE/PHP_AUTH_USER/PHP_AUTH_PW request variables when
they are actually strings (Z_TYPE_PP(data) == IS_STRING).
- CVE-2014-4721
Updated packages:
-
alt-php52_5.2.17-230_amd64.deb
sha:fb049742a647e5d3c52bc857650950d06a818514
-
alt-php52-bcmath_5.2.17-230_amd64.deb
sha:20d17cebd74264f97bfdc0884451a5f73d4bcad3
-
alt-php52-cli_5.2.17-230_amd64.deb
sha:72ad5003b3e2c08fca757afd6aeb422e51695bbb
-
alt-php52-common_5.2.17-230_amd64.deb
sha:04eccc2e5f0529a41dfe0e60aacfe36d48a1249c
-
alt-php52-dba_5.2.17-230_amd64.deb
sha:e0309714a01af300c92b69b47da8c3bb7c605a14
-
alt-php52-dbx_5.2.17-230_amd64.deb
sha:7686e67737192b9dba9465292800e1bca43f7c79
-
alt-php52-dev_5.2.17-230_amd64.deb
sha:53082a33e35389fda6bde64205e75dc9a079146e
-
alt-php52-enchant_5.2.17-230_amd64.deb
sha:326b84177bf9acab3a649b716be90f91b9f4f1d5
-
alt-php52-firebird_5.2.17-230_amd64.deb
sha:284459a84302bb9ed5ada17039e170a76c3fbf19
-
alt-php52-gd_5.2.17-230_amd64.deb
sha:d53c6e1438c92d805a92f22d971c9f3a90df850c
-
alt-php52-imap_5.2.17-230_amd64.deb
sha:af2dba6f3b70312f2677206dcd5af126f0399e8c
-
alt-php52-intl_5.2.17-230_amd64.deb
sha:8470e9a0d846879b7dc098d80a07ad268bcbf536
-
alt-php52-ldap_5.2.17-230_amd64.deb
sha:f962375dd5fc2acd32aa14f65c37df7ba16414bb
-
alt-php52-mbstring_5.2.17-230_amd64.deb
sha:1c8f1fee9712a2bda2a4933ef6562c94979b1e51
-
alt-php52-mcrypt_5.2.17-230_amd64.deb
sha:9df2144374381c0f9266dbce0265046f005608f0
-
alt-php52-mysqlnd_5.2.17-230_amd64.deb
sha:8cbb215a896f4aff25e8df475fdb38678b6dfc50
-
alt-php52-odbc_5.2.17-230_amd64.deb
sha:827886e342f1161fdc24f5a2c5b556d385608548
-
alt-php52-pdo_5.2.17-230_amd64.deb
sha:2693a2621228603e96eee203a605547c375b3f02
-
alt-php52-pgsql_5.2.17-230_amd64.deb
sha:6d7ff5fd656dd0b07490e7e0bd45186d8632b7ec
-
alt-php52-process_5.2.17-230_amd64.deb
sha:0f099d8470fc5b0bd21cb10bf25c69f21c92478b
-
alt-php52-pspell_5.2.17-230_amd64.deb
sha:7fd94f15fc96fcfcf954551aa914bc5fbf66baba
-
alt-php52-recode_5.2.17-230_amd64.deb
sha:7a3d8c34d7f77fba85aa32180bafe5dfaa0d31d0
-
alt-php52-snmp_5.2.17-230_amd64.deb
sha:1bcfa202bd7cc7118b74c331d26eefde6efc11b2
-
alt-php52-soap_5.2.17-230_amd64.deb
sha:1de98e5fa2faec417be0bc24a7bdf33258b8e754
-
alt-php52-sqlite_5.2.17-230_amd64.deb
sha:25c7eb1268912b6012e72142fd6242caa1ab44ea
-
alt-php52-sybase_5.2.17-230_amd64.deb
sha:e6e18ab7f042338e86e1b2be5f200d886fe82d15
-
alt-php52-tidy_5.2.17-230_amd64.deb
sha:c3d351799301fa2254f1f0402c7a65b39560e01b
-
alt-php52-xml_5.2.17-230_amd64.deb
sha:d197eca935b422025b124df1990df4cfd5e19307
-
alt-php52-xmlrpc_5.2.17-230_amd64.deb
sha:b240f646bfd9d73193dee150dbc94d0b4a49da70
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
