Release date:
2026-10-06 01:18:00 UTC
Description:
- CVE-2026-93682: out-of-bounds read in the http:// wrapper when a redirect
response carries an empty Location header. The relative-redirect test in
ext/standard/http_fopen_wrapper.c read location[1] on a one-byte allocation
and could build the redirect target from adjacent heap bytes. Backports the
net effect of upstream 8196275 and its follow-up de3436c: both checks now
use header_info.location_len, and the relative join is taken only when
location_len > 1 (the end state, so the intermediate "> 0" form that
regressed single-character Location values is never present here). Adds both
upstream .phpt tests, adapted for 5.2 (no nowdoc, no function-call array
dereference, dirname(__FILE__), ServerClientTestCase2.inc); %check
unset DISPLAY
picks
them up automatically from this patch
Updated packages:
-
alt-php52-5.2.17-241.el6.x86_64.rpm
sha:cfc139a572ee30184a1f5763eff30f761ee5a7417549efbd9281a90b841f0ffb
-
alt-php52-bcmath-5.2.17-241.el6.x86_64.rpm
sha:5317ed4d7040e65b91fa6ee3827c9ffeb41141befa6cba92dc0356bc14248cd5
-
alt-php52-cli-5.2.17-241.el6.x86_64.rpm
sha:b657fcdf6297732a59f9298c09798da1b647e6b5b4d98c1e8aaf4694a1fedd30
-
alt-php52-common-5.2.17-241.el6.x86_64.rpm
sha:9348daae0527a66bb7ddb8b840b7e6aeb55fe8bab8af7b56554709a68c6965b5
-
alt-php52-dba-5.2.17-241.el6.x86_64.rpm
sha:62189e522ed2dd7286b1a8c630234ac58b01a9762da0c323a6754bcbe2f163c1
-
alt-php52-dbx-5.2.17-241.el6.x86_64.rpm
sha:f5dec6e806279d29a8c246206d6369dc1336584897d55b960ae2ed5c97294d67
-
alt-php52-devel-5.2.17-241.el6.x86_64.rpm
sha:f2d3c0dc6b596d5c0885345236b065fded6e4bff965c88f4dc230422ce5bf71c
-
alt-php52-enchant-5.2.17-241.el6.x86_64.rpm
sha:88109edaabd142cbf664869c9bd5a596a92fde76f81cfcaa7e1d5f867306a36c
-
alt-php52-firebird-5.2.17-241.el6.x86_64.rpm
sha:e92b8de30b1dce76e69acd45f5e8378bb683d05157ed1c57a753320a7e5438ab
-
alt-php52-gd-5.2.17-241.el6.x86_64.rpm
sha:ad6dfc231952484b1c88480ca5463fe3e24316243f8a49905c4053581a0eca96
-
alt-php52-imap-5.2.17-241.el6.x86_64.rpm
sha:b368e964face4acaaffa51b65a62be0180fed9822630d645d91438d270e13d82
-
alt-php52-intl-5.2.17-241.el6.x86_64.rpm
sha:f68d75191bc7b44b8979dc45697b87c65a71e525c5cf7ba903f058e5d9c905d2
-
alt-php52-ldap-5.2.17-241.el6.x86_64.rpm
sha:15a2911e36c7232b8069a70fa9a6a33300c848829663cf0b4fd633419dfe9a4c
-
alt-php52-mbstring-5.2.17-241.el6.x86_64.rpm
sha:eb1c706cbd025c1d8799dd8955360c8a2d4bbc401bd9df44b6cfda0942dfdd12
-
alt-php52-mcrypt-5.2.17-241.el6.x86_64.rpm
sha:949c0976e0adcaaa067ea11cf41c8932e5bf3c0318694f8558d8799435c5b217
-
alt-php52-mssql-5.2.17-241.el6.x86_64.rpm
sha:358baab3cae08e4a96c49a0e0156ce7d39645cd91d22eab8f57929970a213d8a
-
alt-php52-ncurses-5.2.17-241.el6.x86_64.rpm
sha:c3e6491a1b5ccd3456eae17f379bfa123f1a9753d3db3b9cb0951d8bff991c63
-
alt-php52-odbc-5.2.17-241.el6.x86_64.rpm
sha:770f0d6c5ed6c017ed088be9f21f95e25dfabb1d770d167ca32793b8099106af
-
alt-php52-pdo-5.2.17-241.el6.x86_64.rpm
sha:b7d8e732af7834d5cae3869b941389d9cbb43ba4f9e2b86322777122ecba41fa
-
alt-php52-pgsql-5.2.17-241.el6.x86_64.rpm
sha:f5759f28eb6e6c059f039c24d4d890e67ac52922c1b885aff7d5da6c90dd0f70
-
alt-php52-process-5.2.17-241.el6.x86_64.rpm
sha:d3f0022aa941f5d5775680c2e12c59152f49f671023ee19fd0c618048bc83ca7
-
alt-php52-pspell-5.2.17-241.el6.x86_64.rpm
sha:bbb6632489d91a6ad609774c498a188926139f4d3e3fcc56928d698c02263449
-
alt-php52-recode-5.2.17-241.el6.x86_64.rpm
sha:28c7e8e678397e189841018d621f8f252a06011ce33bc1e016f9dc94e42be242
-
alt-php52-snmp-5.2.17-241.el6.x86_64.rpm
sha:db514de8e98d4e8ea721c5487aaab7380a97d0423d994947f9ccb96879311d1a
-
alt-php52-soap-5.2.17-241.el6.x86_64.rpm
sha:1c959c592a24cd1989a2567723eac9006a795f027d0d88d3b91f1013a4b1fa03
-
alt-php52-sqlite-5.2.17-241.el6.x86_64.rpm
sha:8b556bee6b52047cd0443d57e659701eb543864c1a371a9c276f256f6f9d4f21
-
alt-php52-sybase-5.2.17-241.el6.x86_64.rpm
sha:fbdf7a87dcc33016d2ac9cc65a437f41a2c3412fd4f42e37b08341564bf2384c
-
alt-php52-tidy-5.2.17-241.el6.x86_64.rpm
sha:dd249290dbde735d3501a5a1631096744f991f7fbc18c9a0660d639163afc02c
-
alt-php52-xml-5.2.17-241.el6.x86_64.rpm
sha:0676d7fcee4fe2375d96a7a8c5a11511b02d991b323177b784d5e415c955b852
-
alt-php52-xmlrpc-5.2.17-241.el6.x86_64.rpm
sha:dbda2940b4b1f17791dd72b588eb17f66eaaba3f789ac15fd2381bf57f4d1b1a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
