[CLSA-2026:1783359474] Fix of 32 CVEs

Type:

security

Severity:

Important

Release date:

2026-07-09 10:14:45 UTC

Description:

   * SECURITY UPDATE: httpoxy - HTTP_PROXY populated from the untrusted "Proxy"
     request header in CGI/FastCGI environments (CVE-2016-5385)
     - debian/patches/php-5.2-CVE-2016-5385.patch: backport upstream commit
       98b9dfaec95e6f910f125ed172cdbd25abd006ec across
       ext/standard/basic_functions.c, main/SAPI.c and main/php_variables.c so
       $_SERVER/$_ENV and getenv() honor HTTP_PROXY only from the real local
       environment and sapi_getenv() never returns it; getenv() gains an
       optional local_only second parameter.

CVEs fixed:

CVE-2006-7243
CVE-2011-0421
CVE-2011-0708
CVE-2011-1148
CVE-2011-1398
CVE-2011-1466
CVE-2011-1469
CVE-2011-1471
CVE-2011-1938
CVE-2011-2202
CVE-2011-4566
CVE-2011-4885
CVE-2012-0781
CVE-2012-1172
CVE-2012-2335
CVE-2012-2336
CVE-2012-2386
CVE-2013-1643
CVE-2013-4248
CVE-2014-3597
CVE-2014-3668
CVE-2014-4049
CVE-2014-5120
CVE-2015-2348
CVE-2015-2783
CVE-2015-3411
CVE-2015-4021
CVE-2015-4024
CVE-2015-4148
CVE-2015-4598
CVE-2016-10167
CVE-2016-5385

Updated packages:

alt-php52_5.2.17-228_amd64.deb
sha:c806d9523f7d32a758f46ac98e1b1c317c0526a5
alt-php52-bcmath_5.2.17-228_amd64.deb
sha:59c7c5fa03a1538ba5812fb6ca15a74b9796f722
alt-php52-cli_5.2.17-228_amd64.deb
sha:e90334ba8593ce67259d1e64d2b20d6505d6900c
alt-php52-common_5.2.17-228_amd64.deb
sha:857ccc128cfc3a1af37e9952ff660b03382f37ba
alt-php52-dba_5.2.17-228_amd64.deb
sha:c6d499d2c8a9da88e0d416f53926a28b2bc86782
alt-php52-dbx_5.2.17-228_amd64.deb
sha:6d3711e9f5f66c1506bbd61aab90deb2ab4b1f67
alt-php52-dev_5.2.17-228_amd64.deb
sha:08fde89ce15223d46c70ef0cc631ca9070239716
alt-php52-enchant_5.2.17-228_amd64.deb
sha:e9e4372e431065c27d45829a1755ee550f2de098
alt-php52-firebird_5.2.17-228_amd64.deb
sha:41d7da1a066666f3afbae85c9e385bb0776305da
alt-php52-gd_5.2.17-228_amd64.deb
sha:4b573c5f16682b78a3d655edf7d337aee094a58e
alt-php52-imap_5.2.17-228_amd64.deb
sha:257e2fbffee201cd2d8cd55a3da3a03b7f1d9aea
alt-php52-intl_5.2.17-228_amd64.deb
sha:163737bf82c6368916d164ff2e3b12ce7ee7b405
alt-php52-ldap_5.2.17-228_amd64.deb
sha:17cf4b93ef65f029ad8c9b55d47d1e636252f29d
alt-php52-mbstring_5.2.17-228_amd64.deb
sha:ef110ae8ae8159e088d35f8767822894170fe461
alt-php52-mcrypt_5.2.17-228_amd64.deb
sha:02011935ac6114fb492d115b705c24ce71a5497b
alt-php52-mysqlnd_5.2.17-228_amd64.deb
sha:1d2430dec2910439e5047b70237f801c659947bb
alt-php52-odbc_5.2.17-228_amd64.deb
sha:4bb41661fbd3568981a7402364bcbe7200782697
alt-php52-pdo_5.2.17-228_amd64.deb
sha:6e67929d3781dbeb39480a3778f13792504ed7ad
alt-php52-pgsql_5.2.17-228_amd64.deb
sha:49dc92450e19a95f86e4b39e9b0381d62f5ffe84
alt-php52-process_5.2.17-228_amd64.deb
sha:9c60239292f6933586d29b453d87ae0e8861e0ec
alt-php52-pspell_5.2.17-228_amd64.deb
sha:5e63ec192e37d9c57b1acc64c6339b23a30bfd4a
alt-php52-recode_5.2.17-228_amd64.deb
sha:1beedf9823bb62d5ceecbe06e1ba787dd49880bb
alt-php52-snmp_5.2.17-228_amd64.deb
sha:7cd21221e200fd9dc58930674da28392970449b5
alt-php52-soap_5.2.17-228_amd64.deb
sha:b48c8b42c2d934c3738236ff06b6e7b8f33f16dc
alt-php52-sqlite_5.2.17-228_amd64.deb
sha:7863bfda339af3c9fa90266d14ed1483d99282f5
alt-php52-sybase_5.2.17-228_amd64.deb
sha:6f2329428010cc9ed72ea93314c18e7de56407da
alt-php52-tidy_5.2.17-228_amd64.deb
sha:b04ff7d7497fb1d4e260e514da8638fa4f4bef2a
alt-php52-xml_5.2.17-228_amd64.deb
sha:dca227698ddadf6560cc1b265cebc29a99c1079d
alt-php52-xmlrpc_5.2.17-228_amd64.deb
sha:cc1c594cb04e377825f00d3b79ff2da11b3dc67e

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.