Release date:
2026-07-20 14:24:53 UTC
Description:
* SECURITY UPDATE: date/time timezone memory leak (CVE-2012-0789)
- debian/patches/CVE-2012-0789.patch: backport the bug #53502 hunk of
upstream commit 4c9fad8b362a7d2b6a94b4961e4b2dc037b2766d so timezone
lookups during date parsing go through the cached
php_date_parse_tzfile_wrapper instead of allocating a fresh
timelib_tzinfo on every call that was never freed.
- CVE-2012-0789
* SECURITY UPDATE: magic_quotes_gpc re-enable during request startup
(CVE-2012-0831)
- debian/patches/php-5.2.17-bug-323016.patch: wire in the existing (but
previously unapplied) upstream bug #323016 patch so magic_quotes_gpc is
turned off via zend_alter_ini_entry_ex() instead of a direct PG() write
while importing environment/server variables. The sapi/fpm hunk is
dropped as alt-php52 does not ship the fpm SAPI.
- CVE-2012-0831
* SECURITY UPDATE: phpinfo() type confusion information leak (CVE-2014-4721)
- debian/patches/CVE-2014-4721.patch: backport upstream commit
fb0128af2a95ec0d1a0360be49776c5b056d1f33 so phpinfo() only prints the
PHP_SELF/PHP_AUTH_TYPE/PHP_AUTH_USER/PHP_AUTH_PW request variables when
they are actually strings (Z_TYPE_PP(data) == IS_STRING).
- CVE-2014-4721
Updated packages:
-
alt-php52_5.2.17-230_amd64.deb
sha:2477b36a5ad276b6caced27f833fa0b75025a956
-
alt-php52-bcmath_5.2.17-230_amd64.deb
sha:fbb4dd801c030284812300f7638869946015c125
-
alt-php52-cli_5.2.17-230_amd64.deb
sha:ca300a603320f63ef427c10ee5ec5800019301b1
-
alt-php52-common_5.2.17-230_amd64.deb
sha:545eaeaa8d0dc4e8be52b041878b0a0dc7d2447d
-
alt-php52-dba_5.2.17-230_amd64.deb
sha:af15cf4a697b3881668786ebd3fbec32baa3e4b8
-
alt-php52-dbx_5.2.17-230_amd64.deb
sha:a3d1801c851c165800c131c1d1623949c7d4a38a
-
alt-php52-dev_5.2.17-230_amd64.deb
sha:09b9030b9503efb212e02781573b89d51e218957
-
alt-php52-enchant_5.2.17-230_amd64.deb
sha:b3d5c93294a70771df5721ac4154979fab242b2b
-
alt-php52-firebird_5.2.17-230_amd64.deb
sha:abb4268a8a18f02c96a1de262aada83dae75995b
-
alt-php52-gd_5.2.17-230_amd64.deb
sha:3f68469f094ecfdb099c0272044f6f2dacf03565
-
alt-php52-imap_5.2.17-230_amd64.deb
sha:3d90d90c30063a2ead8af4f8fb7563f8be998b53
-
alt-php52-intl_5.2.17-230_amd64.deb
sha:bc15860d4421b688a341d9722f6f0aa0b174bf64
-
alt-php52-ldap_5.2.17-230_amd64.deb
sha:64b767189f7c7228822fc888481360128b8a8bd3
-
alt-php52-mbstring_5.2.17-230_amd64.deb
sha:72209b4dbe49196d1879c1bb4c153fea09d316c3
-
alt-php52-mcrypt_5.2.17-230_amd64.deb
sha:e43b9a085cf6823c9cd22bc0134c8d5617cc4f35
-
alt-php52-mysqlnd_5.2.17-230_amd64.deb
sha:188f72c70943a055b50b53ccd2c0c605922a1ba7
-
alt-php52-odbc_5.2.17-230_amd64.deb
sha:116c415a1d9be5cabcd03978df3dc2c2620bf7a0
-
alt-php52-pdo_5.2.17-230_amd64.deb
sha:211bba0a2ca01394b030fdd4124e5ffcc3ba15f5
-
alt-php52-pgsql_5.2.17-230_amd64.deb
sha:a9214bb53fbf82566648ff81e8a0b0d3a8ce5fe6
-
alt-php52-process_5.2.17-230_amd64.deb
sha:327a8318059d165ebc96423cb18b1630c556ae5b
-
alt-php52-pspell_5.2.17-230_amd64.deb
sha:c6526518c59c370867c0b3d0662b28da4161485f
-
alt-php52-recode_5.2.17-230_amd64.deb
sha:6a43696f7a22432e2983c5f82232608a3266fe91
-
alt-php52-snmp_5.2.17-230_amd64.deb
sha:34f19be44877326f2ef6f10bab3c505b142db070
-
alt-php52-soap_5.2.17-230_amd64.deb
sha:a0978d17107d47a296016c1fc2801f9b9ebcc469
-
alt-php52-sqlite_5.2.17-230_amd64.deb
sha:cb2de2961c8c50638ddbfa93d46faf2dbc290cf2
-
alt-php52-sybase_5.2.17-230_amd64.deb
sha:760f10922a94ea146e249b657d0c1a9579922c20
-
alt-php52-tidy_5.2.17-230_amd64.deb
sha:6b4583a592861530dc96d0bd87307cc2ec33d3d6
-
alt-php52-xml_5.2.17-230_amd64.deb
sha:ae19f3f98930de8893ebf955f5964ab176072fac
-
alt-php52-xmlrpc_5.2.17-230_amd64.deb
sha:87fc0571857c4099b6db4219d1b6a6c3dd202844
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
