[CLSA-2026:1784568602] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 17:30:33 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap padding (aes-*-wrap-pad) ciphers - debian/patches/php-8.0-CVE-2026-14355.patch: reserve an extra EVP_CIPHER_block_size() block for EVP_CIPH_WRAP_MODE ciphers in php_openssl_cipher_update() (ext/openssl/openssl.c) so RFC 5649 wrap-with-padding output no longer overflows the zend_string buffer. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-54_amd64.deb
    sha:479d0ed7178199341ff8ae53b7c9e5601d2389ac
  • alt-php80-bcmath_8.0.30-54_amd64.deb
    sha:ee76565598f479e556bf17972062d047b7039ace
  • alt-php80-cli_8.0.30-54_amd64.deb
    sha:15930ffcd2c68fd2a8a13f9bac54210999c9f60d
  • alt-php80-common_8.0.30-54_amd64.deb
    sha:a58bd852a6ac07d172516ad52c08ba905cf24967
  • alt-php80-dba_8.0.30-54_amd64.deb
    sha:f8353c6c5ed9e0e0109375d9a76949cc2e8fa4d2
  • alt-php80-dev_8.0.30-54_amd64.deb
    sha:8a7787319ce35368f97ce5ff73e0219b14560a94
  • alt-php80-enchant_8.0.30-54_amd64.deb
    sha:965d64a20de761c43b47b8325c5dd6e0817c7a83
  • alt-php80-firebird_8.0.30-54_amd64.deb
    sha:1450e0cd489e110e2c9d3a1f2cc0b8acd9888b65
  • alt-php80-gd_8.0.30-54_amd64.deb
    sha:ffee90b3b2c01692d052598b4ddc89f41eb7f61e
  • alt-php80-imap_8.0.30-54_amd64.deb
    sha:1a765727f534b7b564c9ebecbbbf342536c2f420
  • alt-php80-intl_8.0.30-54_amd64.deb
    sha:14ed5079cd78c5a9651469e34a66ce379eee0cae
  • alt-php80-ldap_8.0.30-54_amd64.deb
    sha:e8c2e13981332e9a59ecf045b524ba2307cf2298
  • alt-php80-mbstring_8.0.30-54_amd64.deb
    sha:42fe68f6e1408e0e122687cde1953f55b47a8f4a
  • alt-php80-mysqlnd_8.0.30-54_amd64.deb
    sha:b64a4db4180afef758be4f7601938222d9b20392
  • alt-php80-odbc_8.0.30-54_amd64.deb
    sha:ada0a88acc15be15dc0d8021f7bd91a05689485c
  • alt-php80-opcache_8.0.30-54_amd64.deb
    sha:5880a5bc0d2285b0ee46953213ba422934e92a4e
  • alt-php80-pdo_8.0.30-54_amd64.deb
    sha:37b0eb0a3dae264108109d5a172c234010b78c0e
  • alt-php80-pgsql_8.0.30-54_amd64.deb
    sha:4086f6cbeebf40148a30f315c8d1a78154cdb3a7
  • alt-php80-php-fpm_8.0.30-54_amd64.deb
    sha:8abdb85320726b05e8e303a7d825607efc87317f
  • alt-php80-process_8.0.30-54_amd64.deb
    sha:d289397096c4a9d3a921c0ce073b2b474963b4a3
  • alt-php80-pspell_8.0.30-54_amd64.deb
    sha:704b028d37c0b142f58c6bf4a84f84adad397656
  • alt-php80-snmp_8.0.30-54_amd64.deb
    sha:eedb478280bcea838cf8dbd6a6f2c8b5dc6a0e61
  • alt-php80-soap_8.0.30-54_amd64.deb
    sha:dbd34a5f24264b45bc68e1d9ae9df492f479a69d
  • alt-php80-sodium_8.0.30-54_amd64.deb
    sha:4a314a6b3bd46bf2e9bbfe2da29caaf060fe50a8
  • alt-php80-tidy_8.0.30-54_amd64.deb
    sha:77637b9319eb5876fc4fe1643d8b20b5c321bc93
  • alt-php80-xml_8.0.30-54_amd64.deb
    sha:9ebefcbe7f30f705d7d549ac82f3cd9ba598a0fc
  • alt-php80_8.0.30-54_arm64.deb
    sha:1830e41e14d242c06f0281af1e43491bd6254bb0
  • alt-php80-bcmath_8.0.30-54_arm64.deb
    sha:cc1792a8abe6a2feef4bd56bdb16c74a8f9f2d70
  • alt-php80-cli_8.0.30-54_arm64.deb
    sha:ca5da19e3d3a8706385d64ba59f4dddb2918497b
  • alt-php80-common_8.0.30-54_arm64.deb
    sha:666c2d8b90acecf5bf8b82d2787aae9dd985e710
  • alt-php80-dba_8.0.30-54_arm64.deb
    sha:7117b7210a8a4f2f81a04d2b8e23c7ed2c96bab5
  • alt-php80-dev_8.0.30-54_arm64.deb
    sha:0af98b0654ef74ece7c83e5bb9e24e02c499f466
  • alt-php80-enchant_8.0.30-54_arm64.deb
    sha:e9e47492386bb62c9b26804e43f68b20f4f7aeaa
  • alt-php80-firebird_8.0.30-54_arm64.deb
    sha:7b5f44f1db853dd8084ab452b73f797f151a15c4
  • alt-php80-gd_8.0.30-54_arm64.deb
    sha:98797b56e33d8676749bb3200f24490e136a53b0
  • alt-php80-imap_8.0.30-54_arm64.deb
    sha:be51fca82e512524b15d995521ef407b50f2da30
  • alt-php80-intl_8.0.30-54_arm64.deb
    sha:2b5e76e3f70c11652468075ac1a0940acf697c24
  • alt-php80-ldap_8.0.30-54_arm64.deb
    sha:afa08740ac30c484774fdd28aab87c9dce4c6fe7
  • alt-php80-mbstring_8.0.30-54_arm64.deb
    sha:d0d344d2e0bbcb9939dc4da713f84dc7be8cf752
  • alt-php80-mysqlnd_8.0.30-54_arm64.deb
    sha:c1b0055a93e17fbb33d8a55c13382911415a2942
  • alt-php80-odbc_8.0.30-54_arm64.deb
    sha:2057e5c95417cc352e0546f0b08b0932d2b0602c
  • alt-php80-opcache_8.0.30-54_arm64.deb
    sha:b785f0b9f0e3b76a9909666db1cb3445ab472e83
  • alt-php80-pdo_8.0.30-54_arm64.deb
    sha:d66e87de624d3f16a948f7f4a75c403c22cb1226
  • alt-php80-pgsql_8.0.30-54_arm64.deb
    sha:ac743f7acd9a86d95bc0fc82a82105b1d92660fa
  • alt-php80-php-fpm_8.0.30-54_arm64.deb
    sha:10db67afb7ef688a9353e58b360e4e8b22175f32
  • alt-php80-process_8.0.30-54_arm64.deb
    sha:b6db9b93ac9832466004364425a84cd564cadfc1
  • alt-php80-pspell_8.0.30-54_arm64.deb
    sha:0dd9fd2ae2da82ff0b7bf5e3eaf6678355df3a32
  • alt-php80-snmp_8.0.30-54_arm64.deb
    sha:95149dfc13d3dcef8c7211f4bf3f4a2b5920a4af
  • alt-php80-soap_8.0.30-54_arm64.deb
    sha:3fbf19338498aa42e757cbb3b6f2df8d39ee61a4
  • alt-php80-sodium_8.0.30-54_arm64.deb
    sha:2be78552f0b19a786811707c12d8baca3487152b
  • alt-php80-tidy_8.0.30-54_arm64.deb
    sha:03ff3014b2d6f72be8e62de1087e70b061e90675
  • alt-php80-xml_8.0.30-54_arm64.deb
    sha:da1a0533a92d53da0bb885d41374989234c3bca7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.