[CLSA-2026:1783358506] Fix of 32 CVEs

Type:

security

Severity:

Important

Release date:

2026-07-09 10:36:58 UTC

Description:

   * SECURITY UPDATE: httpoxy - HTTP_PROXY populated from the untrusted "Proxy"
     request header in CGI/FastCGI environments (CVE-2016-5385)
     - debian/patches/php-5.2-CVE-2016-5385.patch: backport upstream commit
       98b9dfaec95e6f910f125ed172cdbd25abd006ec across
       ext/standard/basic_functions.c, main/SAPI.c and main/php_variables.c so
       $_SERVER/$_ENV and getenv() honor HTTP_PROXY only from the real local
       environment and sapi_getenv() never returns it; getenv() gains an
       optional local_only second parameter.

CVEs fixed:

CVE-2006-7243
CVE-2011-0421
CVE-2011-0708
CVE-2011-1148
CVE-2011-1398
CVE-2011-1466
CVE-2011-1469
CVE-2011-1471
CVE-2011-1938
CVE-2011-2202
CVE-2011-4566
CVE-2011-4885
CVE-2012-0781
CVE-2012-1172
CVE-2012-2335
CVE-2012-2336
CVE-2012-2386
CVE-2013-1643
CVE-2013-4248
CVE-2014-3597
CVE-2014-3668
CVE-2014-4049
CVE-2014-5120
CVE-2015-2348
CVE-2015-2783
CVE-2015-3411
CVE-2015-4021
CVE-2015-4024
CVE-2015-4148
CVE-2015-4598
CVE-2016-10167
CVE-2016-5385

Updated packages:

alt-php52_5.2.17-228_amd64.deb
sha:5c19c8c181fe5555a26563971f0d4e8ad030bd7f
alt-php52-bcmath_5.2.17-228_amd64.deb
sha:5c35116b47ec2fb9270a4657c61569a6093be8c1
alt-php52-cli_5.2.17-228_amd64.deb
sha:f5923adc9e6c2c87fc5625f42472ed948b5bb6b8
alt-php52-common_5.2.17-228_amd64.deb
sha:d45206027b8bfa6b7a12dc7352d5095875b439bb
alt-php52-dba_5.2.17-228_amd64.deb
sha:a2a6b3ddc1bf2eb5308ae818ca86dec5382243c9
alt-php52-dbx_5.2.17-228_amd64.deb
sha:b72ef237823a1dc915c555dadb86fa2b5d48eac0
alt-php52-dev_5.2.17-228_amd64.deb
sha:62ec6025d01ee25a10b64724cb33ce757b2767c6
alt-php52-enchant_5.2.17-228_amd64.deb
sha:74f96a75cb6eee0469059b2f82de6eb092ab0cff
alt-php52-firebird_5.2.17-228_amd64.deb
sha:b3aba9591ff9fc99206be2064cb3e371800c0a34
alt-php52-gd_5.2.17-228_amd64.deb
sha:43efcbbd83104dcf54e9bd270df1af3f282e4627
alt-php52-imap_5.2.17-228_amd64.deb
sha:0932d0817b0304588a9a3a477cac6150c4b1add0
alt-php52-intl_5.2.17-228_amd64.deb
sha:753a465c9f8d2dc5ddb53a45273a4ea92f7efbc8
alt-php52-ldap_5.2.17-228_amd64.deb
sha:a83b40391d7b7326047a758db9191ea50c849f26
alt-php52-mbstring_5.2.17-228_amd64.deb
sha:cd36fa7d604423147049b70c2769c58707e6714e
alt-php52-mcrypt_5.2.17-228_amd64.deb
sha:b016fa1bd3f2fa338007aac1df91bfe179f911dc
alt-php52-mysqlnd_5.2.17-228_amd64.deb
sha:ed92336c4cbe19bb7b14edbc1dcb8e82dbb30f13
alt-php52-odbc_5.2.17-228_amd64.deb
sha:28f0ccb4ab23aa3620ac406be10dc5cb0b6b9078
alt-php52-pdo_5.2.17-228_amd64.deb
sha:3ccbba287a57ab7fd801291ac6a82b695669f02d
alt-php52-pgsql_5.2.17-228_amd64.deb
sha:abf42cc9cde1002a816abee92b4f27c7a8f3bdc0
alt-php52-process_5.2.17-228_amd64.deb
sha:115108b89cbe909bea7d4b490ed0fce95f8f62e4
alt-php52-pspell_5.2.17-228_amd64.deb
sha:9b29369904a8f770868ee054919d5958d7931299
alt-php52-recode_5.2.17-228_amd64.deb
sha:ca61e048d77ee51dfe6c48e295498ba556508d34
alt-php52-snmp_5.2.17-228_amd64.deb
sha:a1790d0696649ecd04d22bcab2d6eda2a1df01b5
alt-php52-soap_5.2.17-228_amd64.deb
sha:ece6d27e5a0d0d26846177d9e2314c1d974b7b18
alt-php52-sqlite_5.2.17-228_amd64.deb
sha:c7d0a8ad80b7d320521bd0abc9ab8061bd8d4cfc
alt-php52-sybase_5.2.17-228_amd64.deb
sha:ff43e428543eff86d89f8fff47ac2171787177c3
alt-php52-tidy_5.2.17-228_amd64.deb
sha:23f3d65603c17c3f1ab405737d8e18e6fbee79d3
alt-php52-xml_5.2.17-228_amd64.deb
sha:d819b646102b3b97ee1d520866cf749d9cbd4455
alt-php52-xmlrpc_5.2.17-228_amd64.deb
sha:6ae77b60b2590b1aa34f6bb00f7f57c86f022b7f

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.