[CLSA-2026:1784564399] alt-php71: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 16:20:28 UTC
Description:
- CVE-2026-14355: fix openssl_encrypt() zend mm heap overflow on AES key-wrap-with-padding (aes-*-wrap-pad) by reserving an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream cbc0489126a7682796aad1e5fb4e51de74af162c)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-100.el7.x86_64.rpm
    sha:52eb0c36a0cece45916e3507d6c4293b129a57c52544eb60d24d5a738f1fd71b
  • alt-php71-bcmath-7.1.33-100.el7.x86_64.rpm
    sha:aa80bf31d78f5b4be9727016757596099a705520fa51363e64204da6a2105b1e
  • alt-php71-cli-7.1.33-100.el7.x86_64.rpm
    sha:9bf5abd5f8846b125d92d4d0d90e1490b6fcf03f844ecf5d075f1689cc1f0472
  • alt-php71-common-7.1.33-100.el7.x86_64.rpm
    sha:8fd487b1b78c45193ee15b37b1fcd7858672af83be79adef20b681cf8f25b2e1
  • alt-php71-dba-7.1.33-100.el7.x86_64.rpm
    sha:e846812ba4e78afc05c5fe9572fd64fa8168107599b315f50ce536b3a8c4222a
  • alt-php71-devel-7.1.33-100.el7.x86_64.rpm
    sha:13d48ea893ba748d087aec22bb4869a9b101b3a0ec85be9c5faf47ad4f434f17
  • alt-php71-enchant-7.1.33-100.el7.x86_64.rpm
    sha:5aee0b867e92735851dda52d4163109e75d96672c37b34139264e21a378767cb
  • alt-php71-firebird-7.1.33-100.el7.x86_64.rpm
    sha:f3f8a793128ebdf7c9639061f9511e722605b34e34e7456cbfa366e977581d05
  • alt-php71-gd-7.1.33-100.el7.x86_64.rpm
    sha:eb7cb20cc3dcea89bc006804842459c1ff547604c4ba3f72b7eb79bcacab4cae
  • alt-php71-imap-7.1.33-100.el7.x86_64.rpm
    sha:aa2f085afdb38fc73848c61bf1eb5b0018bc0df462168823c96f53a2923e794d
  • alt-php71-intl-7.1.33-100.el7.x86_64.rpm
    sha:6a20b9a8fc5b763809575613be2afab65eec0998c3b874ee325c1c7a2e090c30
  • alt-php71-ldap-7.1.33-100.el7.x86_64.rpm
    sha:6699358bc4d2ab297a66a8d262574787c0106e9e7bbe8fbb258a08c1358ab9ab
  • alt-php71-mbstring-7.1.33-100.el7.x86_64.rpm
    sha:f93e29893dc92d0f10fa46a07646a1a260c70112ec5feee6f9937630ba12cab8
  • alt-php71-mcrypt-7.1.33-100.el7.x86_64.rpm
    sha:35bc507f87b2b004365dad4b04b4bf576eeeabcdb629d427c4f78d9c3e143ba3
  • alt-php71-mysqlnd-7.1.33-100.el7.x86_64.rpm
    sha:745bfe7799def5bb6b85afff714d35a0f83d12a0291407ebd6f384380626d4b1
  • alt-php71-odbc-7.1.33-100.el7.x86_64.rpm
    sha:fdaf71724b2eac4466228f95da3d2ecca5f6931c1443c081eb4e3a7bc6bfcfdb
  • alt-php71-opcache-7.1.33-100.el7.x86_64.rpm
    sha:40168184231066b2fcf555f79d4c88b84904379cb6c8a8ab52660102126b38dd
  • alt-php71-pdo-7.1.33-100.el7.x86_64.rpm
    sha:a4397d18e62710460afad0c532b1024ea261d582f0b553cdaa15852b0e4b7878
  • alt-php71-pgsql-7.1.33-100.el7.x86_64.rpm
    sha:e2c21b3ef761511c5ff477557288a8d9efc39d12a5a57fd0a30e403d02341655
  • alt-php71-php-fpm-7.1.33-100.el7.x86_64.rpm
    sha:fb058b96344002752d40da26562bd9842c82946f3c5b4e83210bc910e8bdf169
  • alt-php71-process-7.1.33-100.el7.x86_64.rpm
    sha:b5f7767541e3fd1fad0f22f5200f874c116c7c697f2cb12dc86e5898df382b0b
  • alt-php71-pspell-7.1.33-100.el7.x86_64.rpm
    sha:652c75feaa6ee25d31c78329c62373d9d2b9b3e2265dbf3b40b18b75acf8b5bb
  • alt-php71-recode-7.1.33-100.el7.x86_64.rpm
    sha:e313b2091fece9cd887a7ffeb3cbfe8b4513972b4ac06bb75ec4f9bc507ed4c4
  • alt-php71-snmp-7.1.33-100.el7.x86_64.rpm
    sha:57a664f2257d865597b02b68e273ad64bd1abf7721608cbf106abb75ae0d28cf
  • alt-php71-soap-7.1.33-100.el7.x86_64.rpm
    sha:7700e145d3f1d3e7b220a7dadfb5a75787a8b7cb16db7e292d74a0efa8359a5e
  • alt-php71-tidy-7.1.33-100.el7.x86_64.rpm
    sha:0376aa00f4aab7f0654f414c44e8e354efca878a1b716d5ddc3f8f1c480f7c92
  • alt-php71-xml-7.1.33-100.el7.x86_64.rpm
    sha:c84adc8626b97b4b33354dc8bd620afd9059bec0a072a68a962c7d2cab48fb32
  • alt-php71-xmlrpc-7.1.33-100.el7.x86_64.rpm
    sha:c0cfe08af965e0555bfff16270398d38c2efb2592397a378b4d17f1ecc34b1d0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.