[CLSA-2026:1784543830] alt-php52: Fix of 7 CVEs
Type:
security
Severity:
Low
Release date:
2026-07-20 10:37:48 UTC
Description:
- CVE-2012-0789: memory leak in the date/time extension - parsing a date string with an embedded timezone identifier (e.g. strtotime with "Europe/Paris") allocated a fresh timelib_tzinfo on every call that was never freed, letting a remote attacker exhaust memory; timezone lookups now go through the cached php_date_parse_tzfile_wrapper (upstream bug - CVE-2012-0831: magic_quotes_gpc could be re-enabled during request startup because it was reset with a direct PG() write instead of going through the INI subsystem while importing environment/server variables; now switched off via zend_alter_ini_entry_ex() (upstream bug #323016; the fpm SAPI hunk is dropped as 5.2 ships no fpm) - CVE-2014-4721: phpinfo() type confusion / information leak - the PHP_SELF, PHP_AUTH_TYPE, PHP_AUTH_USER and PHP_AUTH_PW request variables were printed with Z_STRVAL_PP() without a type check; each lookup now also requires Z_TYPE_PP(data) == IS_STRING (upstream bug #67498)
CVEs fixed:
Updated packages:
  • alt-php52-5.2.17-231.el9.x86_64.rpm
    sha:9cba6f33a77dea04eb2d66bd6399a40b4a3216392f3b3ae802df4374ab90ae84
  • alt-php52-bcmath-5.2.17-231.el9.x86_64.rpm
    sha:1b88411efb4b727d6409d174dd469ccd416367abe189dcda40a816c2728032bb
  • alt-php52-cli-5.2.17-231.el9.x86_64.rpm
    sha:c45cf4785544e8f64501b7629dac24f198d412e853c5bf0f31b5a1d1c27358ff
  • alt-php52-common-5.2.17-231.el9.x86_64.rpm
    sha:dea771a01493cb36e11a6a67fbbb585ee8ccc43ad3d33d6593f9a9cd62eb7e6e
  • alt-php52-dba-5.2.17-231.el9.x86_64.rpm
    sha:7486e65dd11998d5cd1e228441d0d8e3ce60316840afe64cb4455720ada7213c
  • alt-php52-dbx-5.2.17-231.el9.x86_64.rpm
    sha:32e5cfb21cc3112bc28becd064a602a802198ec02ee321fe58e5a3286ed512b5
  • alt-php52-devel-5.2.17-231.el9.x86_64.rpm
    sha:2d0647a60218a11915d6a7d55ddaffb71cad7ebb36a5d6e8acbe48e3df63eb30
  • alt-php52-enchant-5.2.17-231.el9.x86_64.rpm
    sha:1d8a79907222566fc61b539a986bd02b6a41d85acbada20618734f334ab5431a
  • alt-php52-firebird-5.2.17-231.el9.x86_64.rpm
    sha:95e0eabd40a28fff99a484b1088893677e2b660d010818adc40d5590e93fafd7
  • alt-php52-gd-5.2.17-231.el9.x86_64.rpm
    sha:b71ed3ebb686de4ea8ac6294f9bf58ca50058eca1a1dfbb2c4a75c5bfcde08e9
  • alt-php52-imap-5.2.17-231.el9.x86_64.rpm
    sha:627928cb0dd500dfeed330f0c1ab14c0c7a5a07486a4f6ea760bf0f5c3e606cb
  • alt-php52-intl-5.2.17-231.el9.x86_64.rpm
    sha:5e1324b34ba5cb7b550c6e34639ef2425fab04a6c6c037712c3a13e57fdad1ed
  • alt-php52-ldap-5.2.17-231.el9.x86_64.rpm
    sha:a2881d5926c1f87724e82f0bb050c725b2252380a9fab68869d8759f79b82195
  • alt-php52-mbstring-5.2.17-231.el9.x86_64.rpm
    sha:c80c5d798345cee8ed79069862dcea560fe10c11a314c8d96ca0ed429a905d2e
  • alt-php52-mcrypt-5.2.17-231.el9.x86_64.rpm
    sha:1ce241383b3f81b9b95e8e27b096077b0c0b68cc3bbcb9e332d9fbe4fd2aa38b
  • alt-php52-mssql-5.2.17-231.el9.x86_64.rpm
    sha:f3f4b51444145322652ac9026db1b8382f345e04de5319c9c10db71734b214de
  • alt-php52-ncurses-5.2.17-231.el9.x86_64.rpm
    sha:ae97605b0bb56477a7626be7c7cc3c2b927613888770553b234ee28a255d9927
  • alt-php52-odbc-5.2.17-231.el9.x86_64.rpm
    sha:f1d84858fb330c92f02d4ea462d910190b1dd1bf4c4c3aac8301c689360824dd
  • alt-php52-pdo-5.2.17-231.el9.x86_64.rpm
    sha:9b0fbd69fce34e1277d077cee73ccfad3396f98c7e80e8c853a791a4835a896e
  • alt-php52-pgsql-5.2.17-231.el9.x86_64.rpm
    sha:c4a935447466d7d70cc30e7275ae749aaebfc928d882959c0b6589767716af6a
  • alt-php52-process-5.2.17-231.el9.x86_64.rpm
    sha:66ccf4b98b5ddc2c607fe0a12184c7b10c1516610eef3eb4e1bcb1c7c24e3cff
  • alt-php52-pspell-5.2.17-231.el9.x86_64.rpm
    sha:4a816abb57840c50f0c46d75fbd5e776eaaa242eeb748b3c5dfc74a2c626fb8b
  • alt-php52-recode-5.2.17-231.el9.x86_64.rpm
    sha:2994f60be0c02eacde638a63bfb9835ce92bc28909f089e8ba5777bd6daf0082
  • alt-php52-snmp-5.2.17-231.el9.x86_64.rpm
    sha:52b614d5c4719c28fbf80d828e9a6cf2a0064cf52d61ac9f24e27e6b47c44327
  • alt-php52-soap-5.2.17-231.el9.x86_64.rpm
    sha:3d8eda145a3337ea25289f7045c41af0ffff6032aa527202c5c90cd8c1b63a72
  • alt-php52-sqlite-5.2.17-231.el9.x86_64.rpm
    sha:e24678ea51ff576a2fbff8235f4c246cfec4fda52cf5471befa946ce2d414ad8
  • alt-php52-sybase-5.2.17-231.el9.x86_64.rpm
    sha:11c5d2600f5bc190ea7505979517c6df463d20412f7016eb237b0de630768c3f
  • alt-php52-tidy-5.2.17-231.el9.x86_64.rpm
    sha:0d2435c334ea7b5936caaf93d9dde58f70c58723a0d7ea4f7622090d3868cf7f
  • alt-php52-xml-5.2.17-231.el9.x86_64.rpm
    sha:0f44a78792b89e0bf2228ad45a2c488b8539fc294b3983fb10b12633eefda0bc
  • alt-php52-xmlrpc-5.2.17-231.el9.x86_64.rpm
    sha:33f794a5af37cfbb7cdb7e5642d8b84f2daeb84ffb496d91432d63732abc195b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.