[CLSA-2026:1784308641] alt-php55: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-17 17:17:46 UTC
Description:
- CVE-2026-14355: heap buffer overflow in openssl_encrypt()/openssl_decrypt() with AES key-wrap-with-padding ciphers (aes-*-wrap-pad, RFC 5649) when built against OpenSSL 3.x (ELSLANG-59751, ELSLANG-59676, ELSLANG-59675, ELSLANG-59687, ELSLANG-59692) - debian/patches/php-5.5-CVE-2026-14355.patch: backport upstream cbc0489126a7682796aad1e5fb4e51de74af162c (GH-22187) - reserve one extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers at the output-buffer allocation. 5.5 has no php_openssl_cipher_update() helper, so the fix is applied to both inline call sites (openssl_encrypt + openssl_decrypt).
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-167.el6.x86_64.rpm
    sha:a353329883853a9a54cd3a30c3e66c301b373c5059dc60a05815b510ee327086
  • alt-php55-bcmath-5.5.38-167.el6.x86_64.rpm
    sha:59f5430c0904a3eca045a37ff1772aad4b7a360a8066120e827b2f7a5481db7b
  • alt-php55-cli-5.5.38-167.el6.x86_64.rpm
    sha:c14b20a0ab2866289345ffe41a49315013454e1b7b7d86755dbd3bf90ff1874e
  • alt-php55-common-5.5.38-167.el6.x86_64.rpm
    sha:b66406e8536cfe40d4a563674bc4a789b229158ed6f2ece72f3d23db39483167
  • alt-php55-dba-5.5.38-167.el6.x86_64.rpm
    sha:15ba818a86a758be010a3b1eaf56556e1a8054d3c958b8f0595f0b9f535da077
  • alt-php55-dbx-5.5.38-167.el6.x86_64.rpm
    sha:8ea1d7b08b37c0bd6b767f202c8179010626b40536874c4389feb6022a102b16
  • alt-php55-devel-5.5.38-167.el6.x86_64.rpm
    sha:02629c3cc55f349742a40e38d628319a1ab86e86e947349254a37c02fe2ce89c
  • alt-php55-enchant-5.5.38-167.el6.x86_64.rpm
    sha:ca11f64699b5d77dd9823ada33af1fd6a9cf84112e382ab38de6b1e6459945b0
  • alt-php55-firebird-5.5.38-167.el6.x86_64.rpm
    sha:ef685d58724b8f9f0203be964c4aa99715a29db8ad6eac77bafb73eba3285f41
  • alt-php55-gd-5.5.38-167.el6.x86_64.rpm
    sha:88efa077877290c25cf2bafe3cd6a0abb6dc65043795e34c45641956ba2f95f5
  • alt-php55-imap-5.5.38-167.el6.x86_64.rpm
    sha:3d588f890ae4ab6fd3f744f43af290ea34a8110534fc8d80e8c0a445ba2780d2
  • alt-php55-intl-5.5.38-167.el6.x86_64.rpm
    sha:095fcaee69f76412bf7dc1646c62b4e4d483e758058b266fb588bcdf116c3903
  • alt-php55-ldap-5.5.38-167.el6.x86_64.rpm
    sha:8a553fe8923c260abb9991479eed3e52569e78797c245568bea79a6d011297d4
  • alt-php55-mbstring-5.5.38-167.el6.x86_64.rpm
    sha:4b0174f1cbd45379df2be23d05eaca471e0a4f0f7a091acabbbb2bfc863e7754
  • alt-php55-mcrypt-5.5.38-167.el6.x86_64.rpm
    sha:9bac1ac821d07cb0b265ca136e42bb83a8a9bd07e0cd98e6b256a22ca42e7376
  • alt-php55-mssql-5.5.38-167.el6.x86_64.rpm
    sha:a91d93792ef04f90cb76859e775f6886fbcb261b4ff9eb204ef7d66060a8691e
  • alt-php55-mysqlnd-5.5.38-167.el6.x86_64.rpm
    sha:89246ee443097d51c7eb81cf6270f1c64da2753d3f29f0853f207b845f28b121
  • alt-php55-odbc-5.5.38-167.el6.x86_64.rpm
    sha:8bffe1f32544b8f38cfa50ea8a3b6d54cccac72c0eeabbac9d1f8775c90bb030
  • alt-php55-opcache-5.5.38-167.el6.x86_64.rpm
    sha:b5b23b3907749d480dafccd846a3d761d3402644e57979644440046652805cd5
  • alt-php55-pdo-5.5.38-167.el6.x86_64.rpm
    sha:6fde3e712ed49783c5bbd26a858ac03e2d75725d0c759712e983ff87bbb5c930
  • alt-php55-pgsql-5.5.38-167.el6.x86_64.rpm
    sha:ed50fdb66777629b174ae9a1f62a7cf4285e93ca5af943d5e4e9150e1e6bdf47
  • alt-php55-php-fpm-5.5.38-167.el6.x86_64.rpm
    sha:f2c2b250ff9c58ca12ca400b9e23f7b220d15e56feb3866590086f4e7cf6b87e
  • alt-php55-process-5.5.38-167.el6.x86_64.rpm
    sha:b9f7cb2ffe36217d3cd611b119cb8c16df92ceed4dff19f664797555bf4a9b3b
  • alt-php55-pspell-5.5.38-167.el6.x86_64.rpm
    sha:c4abbf24f298a544765bce9ee7bb0afad59db30478d1e55669bb5d81974f67d3
  • alt-php55-recode-5.5.38-167.el6.x86_64.rpm
    sha:dcd4cf3f30a74fad36edadc8c009f54bf776ded76c13a73e84f6fde2aab935cd
  • alt-php55-snmp-5.5.38-167.el6.x86_64.rpm
    sha:277c7c3cae2cf8cf6495ac6799829e5e68232b3adfea47a5836882a18de33242
  • alt-php55-soap-5.5.38-167.el6.x86_64.rpm
    sha:b8eb6d46056dcbbb0ccae6e62a72de9ee6d6cbd322608f6e95799a4d6e9e6ba2
  • alt-php55-sybase-5.5.38-167.el6.x86_64.rpm
    sha:ca6bf5baf5801502fbb0633486a86b1baff0f42114a3d41a46550c5414098282
  • alt-php55-tidy-5.5.38-167.el6.x86_64.rpm
    sha:4db8a0fab6b27d1fe9b17dd4c48f3cbdfe6ca5a6bf1a0ae43fab22963e08d465
  • alt-php55-xml-5.5.38-167.el6.x86_64.rpm
    sha:08e70c165293948b1804bd6d536e6f021dfa156b48b22e4226072112bd628779
  • alt-php55-xmlrpc-5.5.38-167.el6.x86_64.rpm
    sha:e0a3501b03b7f52de6f3a26946f851861186bfb7854e4d849c428878d496203f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.