[CLSA-2026:1784276250] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-17 08:17:55 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and corrupts the zend heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE.
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-84_amd64.deb
    sha:4e00d95b7237de0c96a678562f112f1d223b3d23
  • alt-php72-bcmath_7.2.34-84_amd64.deb
    sha:de2adc0fe71ad8a1dad3691bdd69066db7c28a0c
  • alt-php72-cli_7.2.34-84_amd64.deb
    sha:a6dbffdbe376040c81e512f5d6af5295ef03077f
  • alt-php72-common_7.2.34-84_amd64.deb
    sha:8659bcc5fcc056a8c3aac4f172fc6bdd02642510
  • alt-php72-dba_7.2.34-84_amd64.deb
    sha:edcac6a81fe00c30c916342bb7e65b697ac644a6
  • alt-php72-dev_7.2.34-84_amd64.deb
    sha:4a6e7a9ed501539948082536f344af7da82ffc0b
  • alt-php72-enchant_7.2.34-84_amd64.deb
    sha:cff03bf3cc00bb5ad3653acbc51df086e2773d50
  • alt-php72-firebird_7.2.34-84_amd64.deb
    sha:46afcf75eedf7bda125cd0296163948fff581bde
  • alt-php72-gd_7.2.34-84_amd64.deb
    sha:a3e99206b4b641d820314e9a3238dd9b03e53844
  • alt-php72-imap_7.2.34-84_amd64.deb
    sha:e55da26667ff910c30b1a1ef21d893b22ce6d751
  • alt-php72-intl_7.2.34-84_amd64.deb
    sha:f41cc8ff80696881c6aeac88f8a7c78880bb08f2
  • alt-php72-ldap_7.2.34-84_amd64.deb
    sha:b5aca19b6b1fdab7fae0e3581ef3d50844cbc820
  • alt-php72-mbstring_7.2.34-84_amd64.deb
    sha:f59c1b8edb121a30eb71d2a44072943d5bb1d473
  • alt-php72-mysqlnd_7.2.34-84_amd64.deb
    sha:6dbbbc5513f333455e3b28c2620b952b9fa8ad2f
  • alt-php72-odbc_7.2.34-84_amd64.deb
    sha:192a9af0eb401d08c9f2ceec0cd1700da4977065
  • alt-php72-opcache_7.2.34-84_amd64.deb
    sha:c7d9179a3e7d011268a3661c6f5c27707b3130bb
  • alt-php72-pdo_7.2.34-84_amd64.deb
    sha:4792d18fdce1694e3200958a3a064bcc61ca809d
  • alt-php72-pgsql_7.2.34-84_amd64.deb
    sha:e5b77240b91b8b39aaa1a73190bc41f560ce5042
  • alt-php72-php-fpm_7.2.34-84_amd64.deb
    sha:08b055805e35a2a3a88464cae50b360be121af84
  • alt-php72-process_7.2.34-84_amd64.deb
    sha:406e2a4f8c9505e012fc18606a623db5170a58cb
  • alt-php72-pspell_7.2.34-84_amd64.deb
    sha:9e51c2007c647155b9320929bb6d6a813ae371bd
  • alt-php72-recode_7.2.34-84_amd64.deb
    sha:3427283d5c289b86af2bacada90b5012697f63b0
  • alt-php72-snmp_7.2.34-84_amd64.deb
    sha:c5b78833d1d88b532784762049c40eaf8f68e86d
  • alt-php72-soap_7.2.34-84_amd64.deb
    sha:5d913f95ea70569fad38d1f27cc00b37e24ff26e
  • alt-php72-sodium_7.2.34-84_amd64.deb
    sha:1ed16393f4a0fe0c03e260ffbb2dc52c2589e98f
  • alt-php72-tidy_7.2.34-84_amd64.deb
    sha:61ab0191b128e694e895022396da60141fe85312
  • alt-php72-xml_7.2.34-84_amd64.deb
    sha:335cf9896e6648390b14187719683143df419ce0
  • alt-php72-xmlrpc_7.2.34-84_amd64.deb
    sha:d1d51c8fc563f1e79647eb1ec16cbb62d3eedd42
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.