Release date:
2026-07-20 12:12:21 UTC
Description:
* SECURITY UPDATE: date/time timezone memory leak (CVE-2012-0789)
- debian/patches/CVE-2012-0789.patch: backport the bug #53502 hunk of
upstream commit 4c9fad8b362a7d2b6a94b4961e4b2dc037b2766d so timezone
lookups during date parsing go through the cached
php_date_parse_tzfile_wrapper instead of allocating a fresh
timelib_tzinfo on every call that was never freed.
- CVE-2012-0789
* SECURITY UPDATE: magic_quotes_gpc re-enable during request startup
(CVE-2012-0831)
- debian/patches/php-5.2.17-bug-323016.patch: wire in the existing (but
previously unapplied) upstream bug #323016 patch so magic_quotes_gpc is
turned off via zend_alter_ini_entry_ex() instead of a direct PG() write
while importing environment/server variables. The sapi/fpm hunk is
dropped as alt-php52 does not ship the fpm SAPI.
- CVE-2012-0831
* SECURITY UPDATE: phpinfo() type confusion information leak (CVE-2014-4721)
- debian/patches/CVE-2014-4721.patch: backport upstream commit
fb0128af2a95ec0d1a0360be49776c5b056d1f33 so phpinfo() only prints the
PHP_SELF/PHP_AUTH_TYPE/PHP_AUTH_USER/PHP_AUTH_PW request variables when
they are actually strings (Z_TYPE_PP(data) == IS_STRING).
- CVE-2014-4721
Updated packages:
-
alt-php52_5.2.17-230_amd64.deb
sha:6f8c0169897138535e349916e6510a1c7bf720fb
-
alt-php52-bcmath_5.2.17-230_amd64.deb
sha:a11207d09d9303e8500ccb943f11b1dc3e81140b
-
alt-php52-cli_5.2.17-230_amd64.deb
sha:4b241c7aa8f64bb916a28cdfbe39379f1e199a8b
-
alt-php52-common_5.2.17-230_amd64.deb
sha:ba4b3d9772d5006cab4d1fc8c98fc63c1c5addb3
-
alt-php52-dba_5.2.17-230_amd64.deb
sha:bb19b4d07b2aed633ae050cab8fce033caaa95b9
-
alt-php52-dbx_5.2.17-230_amd64.deb
sha:3995e537091e96d1b8bc44821c7190ef5898475f
-
alt-php52-dev_5.2.17-230_amd64.deb
sha:9c042d8f245ecee3aab69c33ff7f386c8e6aeec1
-
alt-php52-enchant_5.2.17-230_amd64.deb
sha:be9bdd31dcab206ef764b35b6ce8aea848ed3ffe
-
alt-php52-firebird_5.2.17-230_amd64.deb
sha:c5ff5829996ad1377e1b0bf241f874d0b0366657
-
alt-php52-gd_5.2.17-230_amd64.deb
sha:03fc503e0cf64873f6a3adf2c26083f3e5240a62
-
alt-php52-imap_5.2.17-230_amd64.deb
sha:363ebe4653385490f52fba2f8b224cd86a29b03b
-
alt-php52-intl_5.2.17-230_amd64.deb
sha:6f85cc71e9240b193f12368a64977c614f30e81a
-
alt-php52-ldap_5.2.17-230_amd64.deb
sha:38a98ddff7032caea88210adb6a54d4a3353faac
-
alt-php52-mbstring_5.2.17-230_amd64.deb
sha:bda08ec2eb54bb5d17ff69957b7d9af7a8b99121
-
alt-php52-mcrypt_5.2.17-230_amd64.deb
sha:44b262c8fbae820571662583ba7e252dc78e37af
-
alt-php52-mysqlnd_5.2.17-230_amd64.deb
sha:e795c83d9521d9150763cec5bdba84851042d2e1
-
alt-php52-odbc_5.2.17-230_amd64.deb
sha:9140cb503d94822bd814c42b441b3c93fd699cb7
-
alt-php52-pdo_5.2.17-230_amd64.deb
sha:989e2f87cc62c65f5b95a4f1a904190948c9cde3
-
alt-php52-pgsql_5.2.17-230_amd64.deb
sha:31be955ba5a688dd528e218901d0e0f6b1f31ba9
-
alt-php52-process_5.2.17-230_amd64.deb
sha:922fbdfde0e7215e688c941075a541f32504ad02
-
alt-php52-pspell_5.2.17-230_amd64.deb
sha:39208380170b3ef49a5eee2e1daa115f136cceb8
-
alt-php52-recode_5.2.17-230_amd64.deb
sha:e0a697b01473958f285b1ae7d45684dd3369e344
-
alt-php52-snmp_5.2.17-230_amd64.deb
sha:a3a9bcaf4285c49d2785629ca48dcd08a80d7924
-
alt-php52-soap_5.2.17-230_amd64.deb
sha:e0cd16ae2d95e3b060a645569c147029b1ed8126
-
alt-php52-sqlite_5.2.17-230_amd64.deb
sha:18d5423499eff9cdc475d623b46ed5588b675690
-
alt-php52-sybase_5.2.17-230_amd64.deb
sha:138e38468adcecd4872c4804e3dcc73dfd5e7175
-
alt-php52-tidy_5.2.17-230_amd64.deb
sha:f23cac7043ffbebb9a1b815f94a3e9a46fe727ce
-
alt-php52-xml_5.2.17-230_amd64.deb
sha:bb40eae678432c21ec11dfe4e0325bc3bce2e2d9
-
alt-php52-xmlrpc_5.2.17-230_amd64.deb
sha:c143f1e5381c0af9ceb15f8277bb4a2a9f178afe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
