[CLSA-2026:1783359856] Fix of 32 CVEs

Type:

security

Severity:

Important

Release date:

2026-07-09 08:56:24 UTC

Description:

   * SECURITY UPDATE: httpoxy - HTTP_PROXY populated from the untrusted "Proxy"
     request header in CGI/FastCGI environments (CVE-2016-5385)
     - debian/patches/php-5.2-CVE-2016-5385.patch: backport upstream commit
       98b9dfaec95e6f910f125ed172cdbd25abd006ec across
       ext/standard/basic_functions.c, main/SAPI.c and main/php_variables.c so
       $_SERVER/$_ENV and getenv() honor HTTP_PROXY only from the real local
       environment and sapi_getenv() never returns it; getenv() gains an
       optional local_only second parameter.

CVEs fixed:

CVE-2006-7243
CVE-2011-0421
CVE-2011-0708
CVE-2011-1148
CVE-2011-1398
CVE-2011-1466
CVE-2011-1469
CVE-2011-1471
CVE-2011-1938
CVE-2011-2202
CVE-2011-4566
CVE-2011-4885
CVE-2012-0781
CVE-2012-1172
CVE-2012-2335
CVE-2012-2336
CVE-2012-2386
CVE-2013-1643
CVE-2013-4248
CVE-2014-3597
CVE-2014-3668
CVE-2014-4049
CVE-2014-5120
CVE-2015-2348
CVE-2015-2783
CVE-2015-3411
CVE-2015-4021
CVE-2015-4024
CVE-2015-4148
CVE-2015-4598
CVE-2016-10167
CVE-2016-5385

Updated packages:

alt-php52_5.2.17-228_amd64.deb
sha:d784f230ac33de923de6aade6039a61d2fed09cf
alt-php52-bcmath_5.2.17-228_amd64.deb
sha:ba2f0b93fee5fe781e2195d1312061cc392d1d70
alt-php52-cli_5.2.17-228_amd64.deb
sha:9478325436a6b6d54bd23d73ff345f9908a89583
alt-php52-common_5.2.17-228_amd64.deb
sha:292cd74df6999fd130e6ae5e24ba029f907d055a
alt-php52-dba_5.2.17-228_amd64.deb
sha:e84064e4cbe1a209345b9ace60db446bca242705
alt-php52-dbx_5.2.17-228_amd64.deb
sha:7b407ef1f8c1bac975c74e4a7bf22cdd44032915
alt-php52-dev_5.2.17-228_amd64.deb
sha:ba1855d6a9aa57170ddef9572d7db0d0ab1d457a
alt-php52-enchant_5.2.17-228_amd64.deb
sha:7d6a3ced10a1325f40e11632175ea8558599366a
alt-php52-firebird_5.2.17-228_amd64.deb
sha:cef2fc20e7267827841671eac7cbc14ef73f5795
alt-php52-gd_5.2.17-228_amd64.deb
sha:0f9227b1bc210bd3caac62878cb0bbf3bca50fa4
alt-php52-imap_5.2.17-228_amd64.deb
sha:0584531fe3f385f23bb8a2bacf849b1218fe6596
alt-php52-intl_5.2.17-228_amd64.deb
sha:137577784538062568dca71e80f077f3190d1134
alt-php52-ldap_5.2.17-228_amd64.deb
sha:d0cc0f08b367b85b3f248d9579731278b2044a5c
alt-php52-mbstring_5.2.17-228_amd64.deb
sha:96ddbde6a63561893dd57712e93f44942ee8d0b1
alt-php52-mcrypt_5.2.17-228_amd64.deb
sha:ed233e41a97a6613287155aca76021022370e064
alt-php52-mysqlnd_5.2.17-228_amd64.deb
sha:98ea91b13bf7e2188b79e7fa65c9ace5b276c8e5
alt-php52-odbc_5.2.17-228_amd64.deb
sha:4657b10292213cc7ba98d0b52771a1c639e14ebd
alt-php52-pdo_5.2.17-228_amd64.deb
sha:c4485994fc2968ac980554005ac12adef4a95b35
alt-php52-pgsql_5.2.17-228_amd64.deb
sha:90ded13ae4fe7388564064f28491e8bfabc3c636
alt-php52-process_5.2.17-228_amd64.deb
sha:f67a9a56c031987731afbb361a6034fa685fc885
alt-php52-pspell_5.2.17-228_amd64.deb
sha:ae6ccecf2e63d9c82435642bfd89b2dc9eaaa04a
alt-php52-recode_5.2.17-228_amd64.deb
sha:79efb07dfeec54c0233cbc74799a9467d37a3994
alt-php52-snmp_5.2.17-228_amd64.deb
sha:32e5a116b04fa161ffb19407ff1f388ef87ed481
alt-php52-soap_5.2.17-228_amd64.deb
sha:a94f65f19019feb6d70dd39361b45eed9a82f997
alt-php52-sqlite_5.2.17-228_amd64.deb
sha:d1db964b6a86733ce08fa46d008384c55487450b
alt-php52-sybase_5.2.17-228_amd64.deb
sha:9287d45b724f93fe0665e541720b2064fc5bd5d5
alt-php52-tidy_5.2.17-228_amd64.deb
sha:a72beb407d47d31046b847db389c13ce0353f4a9
alt-php52-xml_5.2.17-228_amd64.deb
sha:276e375622e47216e8e3f4ba688f6dae751d7737
alt-php52-xmlrpc_5.2.17-228_amd64.deb
sha:2d64e8474c8e60d21aca4d2db3489ada216cdb00

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.