Release date:
2026-07-17 16:22:06 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding
(aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one cipher
block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and
overflows the heap when built against OpenSSL 3.x. Backport of upstream commit
cbc0489126 (GH-22187): reserve one extra block for EVP_CIPH_WRAP_MODE ciphers.
(5.6 has no php_openssl_cipher_update() helper; the fix is applied to the inline
allocations in both openssl_encrypt() and openssl_decrypt())
Updated packages:
-
alt-php56-5.6.40-133.el6.x86_64.rpm
sha:4e418cc6a45324c4a36199ca553154221c06700b8a381b03610db8c8e9c5cb32
-
alt-php56-bcmath-5.6.40-133.el6.x86_64.rpm
sha:543d6c452e2fa81e782df368dd9283c1bc8f652113622a64d43a02d35419609d
-
alt-php56-cli-5.6.40-133.el6.x86_64.rpm
sha:5ca60f96141da5d95a1c80af949ef7ad59c095c8f2ee7c25196da955a86c66d8
-
alt-php56-common-5.6.40-133.el6.x86_64.rpm
sha:050d7559665ca6e3396eb5a9d1726338204330f5ce1becced1e7d2bd7673dbde
-
alt-php56-dba-5.6.40-133.el6.x86_64.rpm
sha:0261a1f35d77e918a8791b7523d3915028a3df8015efaabef3d064a45d281c55
-
alt-php56-dbx-5.6.40-133.el6.x86_64.rpm
sha:c11ff194170d50e2f61eeecc73ddd73d6e864894db1a959e3b02b715b8a3b374
-
alt-php56-devel-5.6.40-133.el6.x86_64.rpm
sha:5ba8900a247663422a4ff315df0808bbe55182bb452cfcec3651d51b7ee4f152
-
alt-php56-enchant-5.6.40-133.el6.x86_64.rpm
sha:f284b7e946e56fa2891efe85865ab37bb0e15223fea81a8bd8673409b1e6e986
-
alt-php56-firebird-5.6.40-133.el6.x86_64.rpm
sha:38d6a3b57fba69e6f5fdf71049cdb0b54b800bbc572f04236c8fc799e6bc72bf
-
alt-php56-gd-5.6.40-133.el6.x86_64.rpm
sha:f24efefeaa3b470ee1eea09d4699ec6fe0b96eb8f100c216a50f3836a46a0f4f
-
alt-php56-imap-5.6.40-133.el6.x86_64.rpm
sha:5e981a931a3c8794a7bcc13f83d1c48d309e105182861e66c22a3f70f873d2d5
-
alt-php56-intl-5.6.40-133.el6.x86_64.rpm
sha:e30ca5161e5783f41e33b0c92da4697af38d90d464314c999ed9b2be4334083c
-
alt-php56-ldap-5.6.40-133.el6.x86_64.rpm
sha:499bbc3bb973b0f273d50334898be512d303b084e92d41dacb298c5c1fde0ff5
-
alt-php56-mbstring-5.6.40-133.el6.x86_64.rpm
sha:a3c85bf4873ca724f2564df4eedd846eae99cdad9c4bd5fe5523ce5dc5258fb4
-
alt-php56-mcrypt-5.6.40-133.el6.x86_64.rpm
sha:2d7f23a5b7e15277fd913469a4ec3e8cb0f4218e8e11c51f3f563558ba77a4d8
-
alt-php56-mssql-5.6.40-133.el6.x86_64.rpm
sha:62b4e0ee8da95fbea24f1c9498f367ce315b8174f2db7075c3e701225c46e18e
-
alt-php56-mysqlnd-5.6.40-133.el6.x86_64.rpm
sha:25616a89d3b144aabf65c4359ec9e1b94f4381db2cc24dda7bb6025cef502912
-
alt-php56-odbc-5.6.40-133.el6.x86_64.rpm
sha:5df10a54deda85d38c3f10552be8003138fd463d53dc2d679af8c0d39e12ec54
-
alt-php56-opcache-5.6.40-133.el6.x86_64.rpm
sha:3476e0d6531a7eee8c5b3c788028647beb32ed8f98b4648b0a28d2c749be0dd7
-
alt-php56-pdo-5.6.40-133.el6.x86_64.rpm
sha:efdb5897db23940cfc25d873fb91656679d0b301623a2cc2e822ea53a3d44f3d
-
alt-php56-pgsql-5.6.40-133.el6.x86_64.rpm
sha:a333abacd514276209e43ae632cf3e9735d45e39d477a591dae2227dd6e2d723
-
alt-php56-php-fpm-5.6.40-133.el6.x86_64.rpm
sha:6356dd0c86c182b9e07ed84f6e607b1814885e256366fc4e59a2ce27dd085929
-
alt-php56-process-5.6.40-133.el6.x86_64.rpm
sha:8c35a44566d4f22783d56e571e7b05955f201acac814f530b85a8099117b40d8
-
alt-php56-pspell-5.6.40-133.el6.x86_64.rpm
sha:f35f96248cc412148c2cc4fdfd41e64d7fc0d515f2981aaea51496a66804c63b
-
alt-php56-recode-5.6.40-133.el6.x86_64.rpm
sha:3637d7214fee2d7ce62d92e57c77895fa88406d970ac963ed39544c4da77fcdc
-
alt-php56-snmp-5.6.40-133.el6.x86_64.rpm
sha:216361836ec83a878c080a99fede751c552e537d021dc125db89176239ae9ca6
-
alt-php56-soap-5.6.40-133.el6.x86_64.rpm
sha:c8f039b55042ed54f204b8be097f162545b01c9cac5722875062b9125a2642a5
-
alt-php56-sybase-5.6.40-133.el6.x86_64.rpm
sha:aab2094969f6c4f8dcdb5d7dbf1b41aa99e08c39c642a95ebff05e1fa2138950
-
alt-php56-tidy-5.6.40-133.el6.x86_64.rpm
sha:ca9c9fd0cc0857e8aaf3ecf5759d9814edfacefdb0d2a86a1cf9181c8b744191
-
alt-php56-xml-5.6.40-133.el6.x86_64.rpm
sha:78ca3c4720ba8b341649a7c6b14327658b6e297cfbed39106366b6eb47d42a66
-
alt-php56-xmlrpc-5.6.40-133.el6.x86_64.rpm
sha:2f461cddd272589150f031c931c027d41df0f77e881fbf1d40ae4c054d38ccd8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
