[CLSA-2026:1784551746] alt-php55: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 17:39:12 UTC
Description:
- CVE-2026-14355: heap buffer overflow in openssl_encrypt()/openssl_decrypt() with AES key-wrap-with-padding ciphers (aes-*-wrap-pad, RFC 5649) when built against OpenSSL 3.x (ELSLANG-59751, ELSLANG-59676, ELSLANG-59675, ELSLANG-59687, ELSLANG-59692) - debian/patches/php-5.5-CVE-2026-14355.patch: backport upstream cbc0489126a7682796aad1e5fb4e51de74af162c (GH-22187) - reserve one extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers at the output-buffer allocation. 5.5 has no php_openssl_cipher_update() helper, so the fix is applied to both inline call sites (openssl_encrypt + openssl_decrypt).
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-167.el7.x86_64.rpm
    sha:8bffcc464d38e7792a38fd979bd2e85ca0927bd093a6faf92caf5b97c2b762e1
  • alt-php55-bcmath-5.5.38-167.el7.x86_64.rpm
    sha:81b19de60e0cc55f3bd2f324212310c552d2886133d4d33cec35c342439e2573
  • alt-php55-cli-5.5.38-167.el7.x86_64.rpm
    sha:0284197f0a72bc2d3d1aba8bc36e9c9e9a35814fff47f8098d9363ad7a8e1cff
  • alt-php55-common-5.5.38-167.el7.x86_64.rpm
    sha:1568fa588910ac58b6c9294aa4618d6258d7ad91d5ae8f1e706bbcc20d1643d0
  • alt-php55-dba-5.5.38-167.el7.x86_64.rpm
    sha:52a5eb7add7d0884d8287988b5c3da3ac920a9081f7d93df4368f4a7cf6b047f
  • alt-php55-dbx-5.5.38-167.el7.x86_64.rpm
    sha:c4bdb2e07abfef70782819186c0d6ae6955137d707447bb573a08a371b9b8b38
  • alt-php55-devel-5.5.38-167.el7.x86_64.rpm
    sha:b647fede8128ec9459f3af6783884d46d695765bde7a0864ef9c111c403fbaf0
  • alt-php55-enchant-5.5.38-167.el7.x86_64.rpm
    sha:81de784cce2dfb3afbc17c66649ead031235cc398e466ac0f54b794309c77a4d
  • alt-php55-firebird-5.5.38-167.el7.x86_64.rpm
    sha:9bac967b26301b60c457052f5b056fe05ebf29356074f26bed050ab7be3c896e
  • alt-php55-gd-5.5.38-167.el7.x86_64.rpm
    sha:afbc41928a0d57a84a1e881fa90e9fed9956dd05725e39053e434b3d3281335a
  • alt-php55-imap-5.5.38-167.el7.x86_64.rpm
    sha:a63dfba90d328e3bf6efa9e7616c3ff58cb281f02fbb17e7c609deba9b9d41e4
  • alt-php55-intl-5.5.38-167.el7.x86_64.rpm
    sha:037d5378a737f70ab4c4b0de18fc729f0c898893407816edbf3e78dc29eac232
  • alt-php55-ldap-5.5.38-167.el7.x86_64.rpm
    sha:f78b1c574adbb608d277b448ac07e87965ffb8a4126a16f4813aad66fba10869
  • alt-php55-mbstring-5.5.38-167.el7.x86_64.rpm
    sha:6c1955567383ac05221d11fd43fd1022951d696520c04e22f5a97a7b443c0a66
  • alt-php55-mcrypt-5.5.38-167.el7.x86_64.rpm
    sha:42194e7f4b60a8f8c8cfb4b6857ca174c2589e7fbefbd5cd48610ea7f5fd95e2
  • alt-php55-mssql-5.5.38-167.el7.x86_64.rpm
    sha:4b6c721ca7a3651889129a044c8bfefd317391fc6881790b140a28e3c39f47b4
  • alt-php55-mysqlnd-5.5.38-167.el7.x86_64.rpm
    sha:a68f4c2fb1ddbdf3397d259296ec4b7ad08b5071e1f6338a912f361ccf3d4f82
  • alt-php55-odbc-5.5.38-167.el7.x86_64.rpm
    sha:2052290a03dba1f1b5322ee69143385fda9214b86cb266b3a19fca12bbc0ba25
  • alt-php55-opcache-5.5.38-167.el7.x86_64.rpm
    sha:2f47e398f33e7de6ad4a4f48a4b639ce19dd329541c543b51d8778e0febe1cf7
  • alt-php55-pdo-5.5.38-167.el7.x86_64.rpm
    sha:7ab09b4fdcde6e11f43c317632a656bd915d74d109c83abfd84ebd1c5b262e96
  • alt-php55-pgsql-5.5.38-167.el7.x86_64.rpm
    sha:460631ec13767d7569a3cab70f1b5fb135199713e9461aa66909e7e075fdf623
  • alt-php55-php-fpm-5.5.38-167.el7.x86_64.rpm
    sha:8173f65c5d1f5bd1e67aedf4df5419d322ea991d1c2148540c4c727a59ceaa7c
  • alt-php55-process-5.5.38-167.el7.x86_64.rpm
    sha:fafb121d5c094bc085d2f0282f2a0f495edcc350ec4455c1b30cf83ae56cc4c5
  • alt-php55-pspell-5.5.38-167.el7.x86_64.rpm
    sha:f67f158c0e797a1eff4e115b8e21a601b9318427b5b9c5c007beba499df78425
  • alt-php55-recode-5.5.38-167.el7.x86_64.rpm
    sha:f6963ff1629f000f7997db6f009c623b1b19e5109281a54f5fe66cc7820c0562
  • alt-php55-snmp-5.5.38-167.el7.x86_64.rpm
    sha:2da31b7ce7d0eb6113505696f54b09a39aef8225d1de761a9b407d1a9d14c622
  • alt-php55-soap-5.5.38-167.el7.x86_64.rpm
    sha:1558a1bb5fe7649e5ffc551801d14f833881a6080ba278687e4edc15bf43cab2
  • alt-php55-sybase-5.5.38-167.el7.x86_64.rpm
    sha:362237000a0cb9d8bdbeb66361d8726cf87bc13b1902e57af9add69d214cc0ca
  • alt-php55-tidy-5.5.38-167.el7.x86_64.rpm
    sha:3831d9dce7c757ccd63d6f51f3fd9e72672e9c1c6d44c062c9ad6da446e7ea80
  • alt-php55-xml-5.5.38-167.el7.x86_64.rpm
    sha:1e44943225a9d0b98a8775ecd3d6d8d80a05d821b2128191ff08eb487fa7ffb6
  • alt-php55-xmlrpc-5.5.38-167.el7.x86_64.rpm
    sha:04be4b7136692bda7813c04bb923fc0b20714ebf37a6c13a2b9d40a6b7c35e88
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.