Release date:
2026-07-20 10:21:11 UTC
Description:
* SECURITY UPDATE: date/time timezone memory leak (CVE-2012-0789)
- debian/patches/CVE-2012-0789.patch: backport the bug #53502 hunk of
upstream commit 4c9fad8b362a7d2b6a94b4961e4b2dc037b2766d so timezone
lookups during date parsing go through the cached
php_date_parse_tzfile_wrapper instead of allocating a fresh
timelib_tzinfo on every call that was never freed.
- CVE-2012-0789
* SECURITY UPDATE: magic_quotes_gpc re-enable during request startup
(CVE-2012-0831)
- debian/patches/php-5.2.17-bug-323016.patch: wire in the existing (but
previously unapplied) upstream bug #323016 patch so magic_quotes_gpc is
turned off via zend_alter_ini_entry_ex() instead of a direct PG() write
while importing environment/server variables. The sapi/fpm hunk is
dropped as alt-php52 does not ship the fpm SAPI.
- CVE-2012-0831
* SECURITY UPDATE: phpinfo() type confusion information leak (CVE-2014-4721)
- debian/patches/CVE-2014-4721.patch: backport upstream commit
fb0128af2a95ec0d1a0360be49776c5b056d1f33 so phpinfo() only prints the
PHP_SELF/PHP_AUTH_TYPE/PHP_AUTH_USER/PHP_AUTH_PW request variables when
they are actually strings (Z_TYPE_PP(data) == IS_STRING).
- CVE-2014-4721
Updated packages:
-
alt-php52_5.2.17-230_amd64.deb
sha:fb049742a647e5d3c52bc857650950d06a818514
-
alt-php52-bcmath_5.2.17-230_amd64.deb
sha:80bc3d74241b1e9d20f8fe3c2bd8408342d136ab
-
alt-php52-cli_5.2.17-230_amd64.deb
sha:7e23da791f7c919967293b1f29eaaf08d9867b17
-
alt-php52-common_5.2.17-230_amd64.deb
sha:3aa4b7a5d3da6467ccad86c44dac952c4ed844b2
-
alt-php52-dba_5.2.17-230_amd64.deb
sha:1b0f57856f6babc741041e30701e6315c6288e92
-
alt-php52-dbx_5.2.17-230_amd64.deb
sha:f0a5faa3bc2775057d808e58da881cc36d4c40ba
-
alt-php52-dev_5.2.17-230_amd64.deb
sha:13a7db3d11533812a4ec717cfec32d499d3840e5
-
alt-php52-enchant_5.2.17-230_amd64.deb
sha:10dd3bdebfbb6951b8d720b8cf7caf550de821b3
-
alt-php52-firebird_5.2.17-230_amd64.deb
sha:c46c5eaedf5bccd10c95b6f9d8b1df1327f969fa
-
alt-php52-gd_5.2.17-230_amd64.deb
sha:6af5802f1bcc03127d281c464413f88d5aae3469
-
alt-php52-imap_5.2.17-230_amd64.deb
sha:d3fa4f94fc92a733efb2d7d8bd378f917fd1cb77
-
alt-php52-intl_5.2.17-230_amd64.deb
sha:15588c5c28cdca259b8638615f5f8790523f0346
-
alt-php52-ldap_5.2.17-230_amd64.deb
sha:af80707d23272d74f7babfed06c58c0469fc29fb
-
alt-php52-mbstring_5.2.17-230_amd64.deb
sha:8060212d9d127636b328bda02760b3b98ac2e016
-
alt-php52-mcrypt_5.2.17-230_amd64.deb
sha:9007f9f0bf51d091735e368ca6782d85d4ed5f75
-
alt-php52-mysqlnd_5.2.17-230_amd64.deb
sha:1552bae17539caf9dab109fc438d41ddf8979313
-
alt-php52-odbc_5.2.17-230_amd64.deb
sha:b0c6edf1c6c0757433b2a07b2f70dd3e20ab3bab
-
alt-php52-pdo_5.2.17-230_amd64.deb
sha:f79492857d0f29f7006ce80ad6e5b9664592f97e
-
alt-php52-pgsql_5.2.17-230_amd64.deb
sha:b2439f3907e3c45be8306434b3275abceb51ee99
-
alt-php52-process_5.2.17-230_amd64.deb
sha:824b196baa00a63563d2c395cc432c4ee3bd17ee
-
alt-php52-pspell_5.2.17-230_amd64.deb
sha:3851d087061b5d7b27c2f8d9061cc39e795a47f7
-
alt-php52-recode_5.2.17-230_amd64.deb
sha:5b32d9cf63762bd828ff13ef289a7253bd8f7660
-
alt-php52-snmp_5.2.17-230_amd64.deb
sha:9bdd75454353f48d1803753e5002dd901960cf5a
-
alt-php52-soap_5.2.17-230_amd64.deb
sha:cff7178a2f3aa57500014d167c6fb839da8946b1
-
alt-php52-sqlite_5.2.17-230_amd64.deb
sha:654b20155731171df1dddc600f34c7da5fcc01ed
-
alt-php52-sybase_5.2.17-230_amd64.deb
sha:0e76a0cc78f514ac7d96f2c67e040327a12ac7b8
-
alt-php52-tidy_5.2.17-230_amd64.deb
sha:a66d1258d523906a409dfaf88d415ba016a42285
-
alt-php52-xml_5.2.17-230_amd64.deb
sha:94c528ea2df88cb0b0192ae152eecf228942ee57
-
alt-php52-xmlrpc_5.2.17-230_amd64.deb
sha:8a1398fc30f6502ab9321cb938553616d3638b60
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
