[CLSA-2026:1784556866] alt-php52: Fix of 7 CVEs
Type:
security
Severity:
Low
Release date:
2026-07-20 14:15:11 UTC
Description:
- CVE-2012-0789: memory leak in the date/time extension - parsing a date string with an embedded timezone identifier (e.g. strtotime with "Europe/Paris") allocated a fresh timelib_tzinfo on every call that was never freed, letting a remote attacker exhaust memory; timezone lookups now go through the cached php_date_parse_tzfile_wrapper (upstream bug - CVE-2012-0831: magic_quotes_gpc could be re-enabled during request startup because it was reset with a direct PG() write instead of going through the INI subsystem while importing environment/server variables; now switched off via zend_alter_ini_entry_ex() (upstream bug #323016; the fpm SAPI hunk is dropped as 5.2 ships no fpm) - CVE-2014-4721: phpinfo() type confusion / information leak - the PHP_SELF, PHP_AUTH_TYPE, PHP_AUTH_USER and PHP_AUTH_PW request variables were printed with Z_STRVAL_PP() without a type check; each lookup now also requires Z_TYPE_PP(data) == IS_STRING (upstream bug #67498)
CVEs fixed:
Updated packages:
  • alt-php52-5.2.17-231.el8.x86_64.rpm
    sha:a2c2629fb39f6f602b3f6443ccd389b61613f0dadcad2c8f5e402fae66556c0a
  • alt-php52-bcmath-5.2.17-231.el8.x86_64.rpm
    sha:85edfd9e5eebd751a832b09fd1ce8340d7946c44ad9e3588a050d0d9b62254c6
  • alt-php52-cli-5.2.17-231.el8.x86_64.rpm
    sha:cd22c21ea89ea0a6f2ce821b03e12ed580d218998e5c1bb43596357d74936b14
  • alt-php52-common-5.2.17-231.el8.x86_64.rpm
    sha:3507a0ea71e535d9283e18e9e272718cb0d84cf7ea929d0b9e3e6dba0503cc28
  • alt-php52-dba-5.2.17-231.el8.x86_64.rpm
    sha:d5d2f2801c88d1ef4b962d2f9d66d7bee29e42ca1f5cd69b33bd239c810d977b
  • alt-php52-dbx-5.2.17-231.el8.x86_64.rpm
    sha:cc1f8b5e7b3fb464d657a4c658288bc20e9e778227219678e7f72210f2874ba9
  • alt-php52-devel-5.2.17-231.el8.x86_64.rpm
    sha:884eab6b55914bcc46672a9b32557a15c707d2a97362fc28c318f7ee68cee40b
  • alt-php52-enchant-5.2.17-231.el8.x86_64.rpm
    sha:9e7bcba28b99bce309f61776965c5bc5bd92d3b7b179b6e38f7cf03c7baddd71
  • alt-php52-firebird-5.2.17-231.el8.x86_64.rpm
    sha:da88c022a3abe549dc99668655550a20888c40994a639cd7f7a9267ac7e3b138
  • alt-php52-gd-5.2.17-231.el8.x86_64.rpm
    sha:a7148121fed96097022c82a849c7ab32865fe3f92842b5bd744436b857c4535c
  • alt-php52-imap-5.2.17-231.el8.x86_64.rpm
    sha:8672d67072219b566ab71ef029bba1145cff16ff3256c0a72c6475fc7c28a9d3
  • alt-php52-intl-5.2.17-231.el8.x86_64.rpm
    sha:bd99fcf63672d1f1e338d4c6818d02406824365859f948137923a2aa18ccaa07
  • alt-php52-ldap-5.2.17-231.el8.x86_64.rpm
    sha:6d1cca688cf845644638f00283ff210c373e132f739bc9d6d7f320bd4756bd5a
  • alt-php52-mbstring-5.2.17-231.el8.x86_64.rpm
    sha:450fde32d7c1d8fcc3678a6219ebab4a8034c7460cef8f4dd086d61fdf50e9a5
  • alt-php52-mcrypt-5.2.17-231.el8.x86_64.rpm
    sha:fc41c4a9cc816a91fdb1847ea3856677d2a79e3791cf1ee3ed0ebb3fc31d13b8
  • alt-php52-mssql-5.2.17-231.el8.x86_64.rpm
    sha:8c2e51619e0e8666094ffae4daefeb57c5dfc637f945b9bba6a5720b87b08a7e
  • alt-php52-ncurses-5.2.17-231.el8.x86_64.rpm
    sha:5991f85ca25b1a4c196290a7e56ec1e0ed01f77ca268973482acd21e78219acb
  • alt-php52-odbc-5.2.17-231.el8.x86_64.rpm
    sha:0eb3ce58ef59ddc1432466cd84f976d5cd2c18d1d159b120424df8d05483a842
  • alt-php52-pdo-5.2.17-231.el8.x86_64.rpm
    sha:11120160ade674d6a79e3cbb8dac49c7dea35676d2ef756a0b55ab2b1b49f505
  • alt-php52-pgsql-5.2.17-231.el8.x86_64.rpm
    sha:5bee807c249d7e50c6ccd1e3c8e06d75989b6f32e343421755e3e25ccbdae5d0
  • alt-php52-process-5.2.17-231.el8.x86_64.rpm
    sha:7a2a769a2d039652d286c6d6a1060295f5f4ec6d09fb132864afef695496ddf4
  • alt-php52-pspell-5.2.17-231.el8.x86_64.rpm
    sha:85c34216205c37c2b9e45ba41ca16bdf7ed719c7bcd174c7e54665628fcb0726
  • alt-php52-recode-5.2.17-231.el8.x86_64.rpm
    sha:40dad90741e9c26582c1f6f971b7407df8cad9cfe77deabacb5ed482be198dad
  • alt-php52-snmp-5.2.17-231.el8.x86_64.rpm
    sha:b23e6faa98e283a9e1ebe0504913c3635c3cd43347eaae0a1cc95161dbfb30fa
  • alt-php52-soap-5.2.17-231.el8.x86_64.rpm
    sha:cd864318c508eab12dce4b4772b293639c3b3d15309dd8384e6f52f541a7459a
  • alt-php52-sqlite-5.2.17-231.el8.x86_64.rpm
    sha:25df8f2801194ffd11ff45419064ea55b3cf4c5791bbcc60e8c548b2dd5f5d9f
  • alt-php52-sybase-5.2.17-231.el8.x86_64.rpm
    sha:325a63bf4354c61598a25e50d18fb0211b967a3bef2eb3ee31d7c4f5b32cf304
  • alt-php52-tidy-5.2.17-231.el8.x86_64.rpm
    sha:ea4eddcb428cc8663a6a4ffcc9f1d00de37684e061e5277a43282850dea6349b
  • alt-php52-xml-5.2.17-231.el8.x86_64.rpm
    sha:acdfebfec97e3aa9418460a59c215b34e06716c9444c7ae063b2741e8b22ccf5
  • alt-php52-xmlrpc-5.2.17-231.el8.x86_64.rpm
    sha:6252d301dfc6deb2e0838597b1e135a85979c808e05e0ddddb7301212be5a6d4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.