[CLSA-2026:1783360237] Fix of 32 CVEs

Type:

security

Severity:

Important

Release date:

2026-07-09 08:44:21 UTC

Description:

   * SECURITY UPDATE: httpoxy - HTTP_PROXY populated from the untrusted "Proxy"
     request header in CGI/FastCGI environments (CVE-2016-5385)
     - debian/patches/php-5.2-CVE-2016-5385.patch: backport upstream commit
       98b9dfaec95e6f910f125ed172cdbd25abd006ec across
       ext/standard/basic_functions.c, main/SAPI.c and main/php_variables.c so
       $_SERVER/$_ENV and getenv() honor HTTP_PROXY only from the real local
       environment and sapi_getenv() never returns it; getenv() gains an
       optional local_only second parameter.

CVEs fixed:

CVE-2006-7243
CVE-2011-0421
CVE-2011-0708
CVE-2011-1148
CVE-2011-1398
CVE-2011-1466
CVE-2011-1469
CVE-2011-1471
CVE-2011-1938
CVE-2011-2202
CVE-2011-4566
CVE-2011-4885
CVE-2012-0781
CVE-2012-1172
CVE-2012-2335
CVE-2012-2336
CVE-2012-2386
CVE-2013-1643
CVE-2013-4248
CVE-2014-3597
CVE-2014-3668
CVE-2014-4049
CVE-2014-5120
CVE-2015-2348
CVE-2015-2783
CVE-2015-3411
CVE-2015-4021
CVE-2015-4024
CVE-2015-4148
CVE-2015-4598
CVE-2016-10167
CVE-2016-5385

Updated packages:

alt-php52_5.2.17-228_amd64.deb
sha:c806d9523f7d32a758f46ac98e1b1c317c0526a5
alt-php52-bcmath_5.2.17-228_amd64.deb
sha:8d8d575ca2be525514db85c9c95194c29f817c52
alt-php52-cli_5.2.17-228_amd64.deb
sha:0f5ac021728c9be1508557313287e9f05a295319
alt-php52-common_5.2.17-228_amd64.deb
sha:58ee9134b09aab00fac0e4dc0292f6cbaaa3e054
alt-php52-dba_5.2.17-228_amd64.deb
sha:ba0bfac57d715ac5353e9f871e057e57c7e18643
alt-php52-dbx_5.2.17-228_amd64.deb
sha:0edc171e4e0ff3f3f1f63184f460bb028e4785ae
alt-php52-dev_5.2.17-228_amd64.deb
sha:3427974de13e62068c1645008996d49120207094
alt-php52-enchant_5.2.17-228_amd64.deb
sha:47e3c33f5f09580c6af0d23270cfa1117fba6d76
alt-php52-firebird_5.2.17-228_amd64.deb
sha:48509631121b157212df954674b9c35d8cb17819
alt-php52-gd_5.2.17-228_amd64.deb
sha:0e299f8eea85137dbda9c118acc6a5205384443c
alt-php52-imap_5.2.17-228_amd64.deb
sha:166b48bfb1f5282663621ee2c3a951868ff97d9f
alt-php52-intl_5.2.17-228_amd64.deb
sha:6132c32b3aea3d64db0afbc5da5d3fbb4bc9ddca
alt-php52-ldap_5.2.17-228_amd64.deb
sha:471e74b2b790acc9f5d814ab55d3080f88405133
alt-php52-mbstring_5.2.17-228_amd64.deb
sha:80eee0849b065a1934499f9ea3a2f2d40ed51ee2
alt-php52-mcrypt_5.2.17-228_amd64.deb
sha:bd2aaa465c406af4fc1feedb45aafda9abac6a0e
alt-php52-mysqlnd_5.2.17-228_amd64.deb
sha:a297cc0feaed2fa0d1223520510f6e77ade1c3a8
alt-php52-odbc_5.2.17-228_amd64.deb
sha:ac22b245419706d53822e46c45e1eba30ad16536
alt-php52-pdo_5.2.17-228_amd64.deb
sha:f4274ddc64b29216de49bcd11dbdff89e9a16492
alt-php52-pgsql_5.2.17-228_amd64.deb
sha:4d87e9a686a6bb7fe6886374dcc16e0915d3582f
alt-php52-process_5.2.17-228_amd64.deb
sha:a0d729784783269d8fd0bbe1541aa91a43653dd8
alt-php52-pspell_5.2.17-228_amd64.deb
sha:01a5c189423340544bc2ebcf05380c80ceb22dca
alt-php52-recode_5.2.17-228_amd64.deb
sha:c97735791a5f79d41368d68649fd0b34722f84bc
alt-php52-snmp_5.2.17-228_amd64.deb
sha:0f6b4a29f279253063a2893fecdd984aed859d44
alt-php52-soap_5.2.17-228_amd64.deb
sha:657bda050c1c366a1314d740789a97c4ae2e0ad8
alt-php52-sqlite_5.2.17-228_amd64.deb
sha:ca234c61a6db4361c102b1db26bdb34dd6d7d941
alt-php52-sybase_5.2.17-228_amd64.deb
sha:9bf1ba2c7bb5b0675d0b0e2976e90062aa7c3e25
alt-php52-tidy_5.2.17-228_amd64.deb
sha:1a9c2903813b168db96fc5a4331d03821169893a
alt-php52-xml_5.2.17-228_amd64.deb
sha:e643834e24cb7940a1bcf6093136e3074f4e2261
alt-php52-xmlrpc_5.2.17-228_amd64.deb
sha:77095aaba96b6eda5ff01c58c433729f9bd420fd

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.