[CLSA-2026:1784559669] alt-php52: Fix of 7 CVEs
Type:
security
Severity:
Low
Release date:
2026-07-20 15:01:56 UTC
Description:
- CVE-2012-0789: memory leak in the date/time extension - parsing a date string with an embedded timezone identifier (e.g. strtotime with "Europe/Paris") allocated a fresh timelib_tzinfo on every call that was never freed, letting a remote attacker exhaust memory; timezone lookups now go through the cached php_date_parse_tzfile_wrapper (upstream bug - CVE-2012-0831: magic_quotes_gpc could be re-enabled during request startup because it was reset with a direct PG() write instead of going through the INI subsystem while importing environment/server variables; now switched off via zend_alter_ini_entry_ex() (upstream bug #323016; the fpm SAPI hunk is dropped as 5.2 ships no fpm) - CVE-2014-4721: phpinfo() type confusion / information leak - the PHP_SELF, PHP_AUTH_TYPE, PHP_AUTH_USER and PHP_AUTH_PW request variables were printed with Z_STRVAL_PP() without a type check; each lookup now also requires Z_TYPE_PP(data) == IS_STRING (upstream bug #67498)
CVEs fixed:
Updated packages:
  • alt-php52-5.2.17-231.el7.x86_64.rpm
    sha:93a9c0bb3c4b084159836136eb23100fafbd3db3ab85959399acc756163363d4
  • alt-php52-bcmath-5.2.17-231.el7.x86_64.rpm
    sha:f71161fc29d0722188f318d43dbfede816bd89338b399ca1fd6b234060e62a1b
  • alt-php52-cli-5.2.17-231.el7.x86_64.rpm
    sha:2a06287c4df7c444a011e59e26abc335fa9bd16da676bdf52e7b7685c2b36101
  • alt-php52-common-5.2.17-231.el7.x86_64.rpm
    sha:6e990c4d4c9b669d4981d6dc09b4c754af1270b4aeb4044ec24006e4f9b7e75e
  • alt-php52-dba-5.2.17-231.el7.x86_64.rpm
    sha:d9746ffe2a36fb768bebf662b4e60878751d067de65c47493235f2ad6f473d26
  • alt-php52-dbx-5.2.17-231.el7.x86_64.rpm
    sha:88721e0298438b2d82e97788b7164cc70157f0981d24c9f34fd83df569bbcc1f
  • alt-php52-devel-5.2.17-231.el7.x86_64.rpm
    sha:400ed6e758185ff4c6db0966e42f30e0dae1942d6522c248f9f76b0c81b01351
  • alt-php52-enchant-5.2.17-231.el7.x86_64.rpm
    sha:ec0114a82d9267a2fd4b81af4eb6e6491b711f25e5509bf8223013ee1d10e061
  • alt-php52-firebird-5.2.17-231.el7.x86_64.rpm
    sha:29c5e299fc500aa45fdd3c62457bf7c490c1374eb5527c9ccc5b3712236663fd
  • alt-php52-gd-5.2.17-231.el7.x86_64.rpm
    sha:e9af5e22f649549a0552d82340f1b59408609ad41db440ca0a0f7e9eab3a7120
  • alt-php52-imap-5.2.17-231.el7.x86_64.rpm
    sha:a2ca01150a83751026199fec09b74613a2c7c8aa36e3adcc2b5fee0a8f34f738
  • alt-php52-intl-5.2.17-231.el7.x86_64.rpm
    sha:e6c53af6bbbac5ecec417c8025bb53c68eb0cdf9776821432a0cb70079c9e0fa
  • alt-php52-ldap-5.2.17-231.el7.x86_64.rpm
    sha:b53fe81ba1fafa99ca8b7dfcce277786595619d30267187c9c1004430db23b76
  • alt-php52-mbstring-5.2.17-231.el7.x86_64.rpm
    sha:f1f5b161abb94a7a56efe02c947669e7b5f8ade29e252d20fae1626843236fe8
  • alt-php52-mcrypt-5.2.17-231.el7.x86_64.rpm
    sha:587b7d8f7d4b45d150499317b4f4dbeec68b99ffe158e08da453fc62e4be3ba2
  • alt-php52-mssql-5.2.17-231.el7.x86_64.rpm
    sha:766459f46bca4442d3e9d4e848a0e0173aae26902b7ad346ef6359dca87d1883
  • alt-php52-ncurses-5.2.17-231.el7.x86_64.rpm
    sha:6ba0933b0e84a34a26e2ec24244405a86728f0302e3b097879bc037aba5ca233
  • alt-php52-odbc-5.2.17-231.el7.x86_64.rpm
    sha:383a70ff1e9c21a846f4ceaa48ce4617f4c02fae42f191d6aa7bfa354acbe6bb
  • alt-php52-pdo-5.2.17-231.el7.x86_64.rpm
    sha:c7bf7c4197fd0269c3a10014725f04387814cc11709a33ad9bb35c91f6af4207
  • alt-php52-pgsql-5.2.17-231.el7.x86_64.rpm
    sha:5fad981806b24ee2c3614b60feaeeb0844d65ec72e51e1f9806e539953946146
  • alt-php52-process-5.2.17-231.el7.x86_64.rpm
    sha:982b22bf25c68b904e25b58976c59309e6a052350116441c13854f7e0d654e12
  • alt-php52-pspell-5.2.17-231.el7.x86_64.rpm
    sha:86b8f9688c7be3e0b6b1dda035bb08fa39c882109f1a8872eeb9a60716574a34
  • alt-php52-recode-5.2.17-231.el7.x86_64.rpm
    sha:75728c337d8cf16c5336799726e501d1c80338e7bb79779bd9a1b50c66058110
  • alt-php52-snmp-5.2.17-231.el7.x86_64.rpm
    sha:713a791c253a813fee8ef7a20d1d4c19034503f1266270fd901c3d8e97826471
  • alt-php52-soap-5.2.17-231.el7.x86_64.rpm
    sha:1ec06d069348ad98e7187e371c2a3c1d094b2b8cce75c4e791fed1e5def6141d
  • alt-php52-sqlite-5.2.17-231.el7.x86_64.rpm
    sha:3c651202e4a23da57d6ad6796e6c273f67aedc2b6478df565b48c2496d43db9c
  • alt-php52-sybase-5.2.17-231.el7.x86_64.rpm
    sha:d3c518bbd510b7773b341aa852f124028bc3bfcf68277743d33fed4478776797
  • alt-php52-tidy-5.2.17-231.el7.x86_64.rpm
    sha:433f45c3b99c8d37f03e866382cdb304d13f091d6cabf5e4e456c17bf9622eb0
  • alt-php52-xml-5.2.17-231.el7.x86_64.rpm
    sha:f8c41ae2d5a9453410a1a1fc23a6c2d4b10923ddbecde8e6f4c06684cf9c3cf6
  • alt-php52-xmlrpc-5.2.17-231.el7.x86_64.rpm
    sha:983a247388200274c31f2a0ed0826a36341f37beab36a66b4174855087d47c92
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.