[CLSA-2026:1783363884] Fix of 32 CVEs

Type:

security

Severity:

Important

Release date:

2026-07-09 11:05:11 UTC

Description:

   * SECURITY UPDATE: httpoxy - HTTP_PROXY populated from the untrusted "Proxy"
     request header in CGI/FastCGI environments (CVE-2016-5385)
     - debian/patches/php-5.2-CVE-2016-5385.patch: backport upstream commit
       98b9dfaec95e6f910f125ed172cdbd25abd006ec across
       ext/standard/basic_functions.c, main/SAPI.c and main/php_variables.c so
       $_SERVER/$_ENV and getenv() honor HTTP_PROXY only from the real local
       environment and sapi_getenv() never returns it; getenv() gains an
       optional local_only second parameter.

CVEs fixed:

CVE-2006-7243
CVE-2011-0421
CVE-2011-0708
CVE-2011-1148
CVE-2011-1398
CVE-2011-1466
CVE-2011-1469
CVE-2011-1471
CVE-2011-1938
CVE-2011-2202
CVE-2011-4566
CVE-2011-4885
CVE-2012-0781
CVE-2012-1172
CVE-2012-2335
CVE-2012-2336
CVE-2012-2386
CVE-2013-1643
CVE-2013-4248
CVE-2014-3597
CVE-2014-3668
CVE-2014-4049
CVE-2014-5120
CVE-2015-2348
CVE-2015-2783
CVE-2015-3411
CVE-2015-4021
CVE-2015-4024
CVE-2015-4148
CVE-2015-4598
CVE-2016-10167
CVE-2016-5385

Updated packages:

alt-php52_5.2.17-228_amd64.deb
sha:3f8a94d0ac4843ed67e928134f0fe7deb0dc1233
alt-php52-bcmath_5.2.17-228_amd64.deb
sha:d4bdc6b41493fbb816d34b67db70f74044803299
alt-php52-cli_5.2.17-228_amd64.deb
sha:2c27f293142f1101e362fd1602299eaa999410e8
alt-php52-common_5.2.17-228_amd64.deb
sha:faaa3f4e213ff373a7b43aae2de1ed78e02e954b
alt-php52-dba_5.2.17-228_amd64.deb
sha:7dede5a327effb193340fb86a5b6c0795a7ccf4b
alt-php52-dbx_5.2.17-228_amd64.deb
sha:7a5323ea71606d4d92dc4accd01c266c7ab44531
alt-php52-dev_5.2.17-228_amd64.deb
sha:05c181bdf8a3507a7dfd0093ebe52079e5bde1ae
alt-php52-enchant_5.2.17-228_amd64.deb
sha:ec61a077f7b3730432775471cb23ab6dc1113411
alt-php52-firebird_5.2.17-228_amd64.deb
sha:51d27ff3121a6afc40ae4b6543a5e7a3cd22e6db
alt-php52-gd_5.2.17-228_amd64.deb
sha:0b32e394cf449df1cb26225d9a57b3ccd49a6de7
alt-php52-imap_5.2.17-228_amd64.deb
sha:d3cfeed6f1ff3f8f2f4a6343ce13159377af62ed
alt-php52-intl_5.2.17-228_amd64.deb
sha:9f472428d660a367a25de302701966db00b7692b
alt-php52-ldap_5.2.17-228_amd64.deb
sha:addddd9306147a62556b0121023ee5f22ed2cbf1
alt-php52-mbstring_5.2.17-228_amd64.deb
sha:5c1f67f9465305a1dde280b4b2f393b54c74cd59
alt-php52-mcrypt_5.2.17-228_amd64.deb
sha:332420146fefd7d4a80de155188e4221d5824346
alt-php52-mysqlnd_5.2.17-228_amd64.deb
sha:79db11aeee5138784af52fdb19830c64346f95b2
alt-php52-odbc_5.2.17-228_amd64.deb
sha:0b17b10a676942e5f2a3cd4c333d0d5fe463acf1
alt-php52-pdo_5.2.17-228_amd64.deb
sha:6973c2d2fdac2d9c538ec6382780db3b5ca6c8f7
alt-php52-pgsql_5.2.17-228_amd64.deb
sha:cd5a9117f8438f33e3f6e208e946821ab7b4a9aa
alt-php52-process_5.2.17-228_amd64.deb
sha:a192ab6295ffd3685b7b2104269fd33ed5f539fe
alt-php52-pspell_5.2.17-228_amd64.deb
sha:272bfd6a4684cd2d83860321441a0dd5be673da6
alt-php52-recode_5.2.17-228_amd64.deb
sha:52517acfb5d3ef4591e5527050227e3e8f96795c
alt-php52-snmp_5.2.17-228_amd64.deb
sha:ebba93879ebb8a7d562a1dd5a146f07b5f31a590
alt-php52-soap_5.2.17-228_amd64.deb
sha:1dca6c49c3fbdc549ae28ae1ab953255811e12bb
alt-php52-sqlite_5.2.17-228_amd64.deb
sha:6886bb716ddda17ba1524b82a62f5f0fe102d8b3
alt-php52-sybase_5.2.17-228_amd64.deb
sha:491c0a7cc71a92b8965b42d6dc385b2434e4645f
alt-php52-tidy_5.2.17-228_amd64.deb
sha:7e9665f7eb3af4527def08d735c75708042001db
alt-php52-xml_5.2.17-228_amd64.deb
sha:fbf2ecc4c3b7c9b16a99232f6694e8785374a727
alt-php52-xmlrpc_5.2.17-228_amd64.deb
sha:179699482d17477b03115a777f90807ad22bcf0e
alt-php52_5.2.17-228_arm64.deb
sha:3f8bb95a8d6c6612ce9f5e557d8b8280e2ae6fa1
alt-php52-bcmath_5.2.17-228_arm64.deb
sha:d9b62faf1730da1c27637be08bed72d35890695c
alt-php52-cli_5.2.17-228_arm64.deb
sha:27c524c8e018f941fab2b817948ad9fd2b3754e7
alt-php52-common_5.2.17-228_arm64.deb
sha:ce475fc063f016e8170ef2a670111f6ba27ecd76
alt-php52-dba_5.2.17-228_arm64.deb
sha:e1733d1575215b81adb3d6b704ba5b1da5a91358
alt-php52-dbx_5.2.17-228_arm64.deb
sha:b65c69f7fa24ab37fd0d61fc8942e2a28a895b25
alt-php52-dev_5.2.17-228_arm64.deb
sha:057ced44839df0448b5f90d62b15e931ad77c817
alt-php52-enchant_5.2.17-228_arm64.deb
sha:2e078e231e69dede8b78c522af9149285bea1c76
alt-php52-firebird_5.2.17-228_arm64.deb
sha:77505e229c0287c48ab1c07bd10a32283eebaa10
alt-php52-gd_5.2.17-228_arm64.deb
sha:53bd0c9ea310bba85c1c991f04c55658e7099e1d
alt-php52-imap_5.2.17-228_arm64.deb
sha:47907deaacd58a349ec6aebeb266bdd312651e76
alt-php52-intl_5.2.17-228_arm64.deb
sha:a7b1054db164a60c367e3b534917fb57a359c3c6
alt-php52-ldap_5.2.17-228_arm64.deb
sha:a0fe173544581ab6fae72afbea9b12f862fccacb
alt-php52-mbstring_5.2.17-228_arm64.deb
sha:596bd92b1e63a42991801eeb6bcd99a1de4929bf
alt-php52-mcrypt_5.2.17-228_arm64.deb
sha:f7049d32caec13513cc5a0af6d4d20ac28426883
alt-php52-mysqlnd_5.2.17-228_arm64.deb
sha:432f964764985a809819105c792a73ffab7cb6cc
alt-php52-odbc_5.2.17-228_arm64.deb
sha:c8fe2dd335f18bf1ad43ad84487ac1b27f728682
alt-php52-pdo_5.2.17-228_arm64.deb
sha:b707e5d60ce38354b9c3767408094c3101a40670
alt-php52-pgsql_5.2.17-228_arm64.deb
sha:70cbdb6a74fe9d86ff7d996614bebf677ba68d73
alt-php52-process_5.2.17-228_arm64.deb
sha:dae0e295d0bb27bfe78e975fb5e5ca0de56ccf5c
alt-php52-pspell_5.2.17-228_arm64.deb
sha:d8bbeec32420d1bd22091f08739b11e7ad1c02b6
alt-php52-recode_5.2.17-228_arm64.deb
sha:1a5f8a7ef80a376fdd4317aa95cae632f4a595ca
alt-php52-snmp_5.2.17-228_arm64.deb
sha:be45b11f3e525e898d256947b36f0e034fb7ef03
alt-php52-soap_5.2.17-228_arm64.deb
sha:bd977c8a2fc5c7d4cbb92342b3a592932c52efe0
alt-php52-sqlite_5.2.17-228_arm64.deb
sha:ce271903b813f9391bf50202afeb81691f0f6b6d
alt-php52-sybase_5.2.17-228_arm64.deb
sha:2ff7314f13ded733eb0e80ee76349b97aed69008
alt-php52-tidy_5.2.17-228_arm64.deb
sha:9c7549983f6a69eca4db6b6d69fe007e736edde3
alt-php52-xml_5.2.17-228_arm64.deb
sha:0e341905657ad8054fdec27fbe3eada04a22c20e
alt-php52-xmlrpc_5.2.17-228_arm64.deb
sha:fd1056f8996e3aa9f6651ca44e849f01bacdaabf

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.