[CLSA-2026:1784275795] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-17 08:10:19 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and corrupts the zend heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE.
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-84_amd64.deb
    sha:4e00d95b7237de0c96a678562f112f1d223b3d23
  • alt-php72-bcmath_7.2.34-84_amd64.deb
    sha:b3d96d1ba7a2cb662128ccfacd2088f6648ba630
  • alt-php72-cli_7.2.34-84_amd64.deb
    sha:25b46c6960422a7f102a0634ec911b052f9063ea
  • alt-php72-common_7.2.34-84_amd64.deb
    sha:07105cd238d21e796170bfdeb36016d6f40787a4
  • alt-php72-dba_7.2.34-84_amd64.deb
    sha:0322d11b2661fcf4b30b565643bfc26b880c04d7
  • alt-php72-dev_7.2.34-84_amd64.deb
    sha:3bae8677d252af42190e6070956488dbc2ac70f0
  • alt-php72-enchant_7.2.34-84_amd64.deb
    sha:b048e7fee04e7e74b39f0efd6f3d3155c5a33d82
  • alt-php72-firebird_7.2.34-84_amd64.deb
    sha:42120a7ae15cd269b81ad07ddea944166e23acf3
  • alt-php72-gd_7.2.34-84_amd64.deb
    sha:296a9263fbdad8484203dcf07e0bbc0fdcf644f9
  • alt-php72-imap_7.2.34-84_amd64.deb
    sha:1b681a9a3fea37661d51051678764707f6d77c1e
  • alt-php72-intl_7.2.34-84_amd64.deb
    sha:2fd446b77c6a6a56b3ab71b1b0c856d6438a4d2e
  • alt-php72-ldap_7.2.34-84_amd64.deb
    sha:5150bfccdf4ccbcb2e9e4a4985bbf0b4cf6c76e6
  • alt-php72-mbstring_7.2.34-84_amd64.deb
    sha:965ad8d3e169af6cdb92a4027989b1556790ed16
  • alt-php72-mysqlnd_7.2.34-84_amd64.deb
    sha:e6970fc924afba98285d6b7c09b035961dd57e2c
  • alt-php72-odbc_7.2.34-84_amd64.deb
    sha:dfe76e79574aa6a3d3e9532d360696be24238d02
  • alt-php72-opcache_7.2.34-84_amd64.deb
    sha:398aa435da626bdf19823f3a39ca439d281fef3a
  • alt-php72-pdo_7.2.34-84_amd64.deb
    sha:8754e470175ba5be3df07525d748f1b6478ecf4c
  • alt-php72-pgsql_7.2.34-84_amd64.deb
    sha:fcbf2050f36cbf47231bbb998cb822a267b989d2
  • alt-php72-php-fpm_7.2.34-84_amd64.deb
    sha:dc84a1781eef9cf3e3cf0edd33f67ef28ae6a667
  • alt-php72-process_7.2.34-84_amd64.deb
    sha:31f5f469b5c2daf5d00d3293b8875c9a1c44afcf
  • alt-php72-pspell_7.2.34-84_amd64.deb
    sha:5a1d88e67587f4dc5c51de3b31d0a1c2ac834fe5
  • alt-php72-recode_7.2.34-84_amd64.deb
    sha:822dca14fd94ff2178c7d3aba2f0d72d428f51f3
  • alt-php72-snmp_7.2.34-84_amd64.deb
    sha:d21651a726f8ce7a82f1256f962a7f5d0bbf6e78
  • alt-php72-soap_7.2.34-84_amd64.deb
    sha:f69dd03ccb62e13ad9d6f7359af7f785facb65fc
  • alt-php72-sodium_7.2.34-84_amd64.deb
    sha:bf41a734faaf0a3d4ee98ad44c3d59299a274c26
  • alt-php72-tidy_7.2.34-84_amd64.deb
    sha:ae2775a7c67b628fe679fac980f6a4e2a69301fb
  • alt-php72-xml_7.2.34-84_amd64.deb
    sha:a277144cd4faf112736428ec4faad7b84543b3c4
  • alt-php72-xmlrpc_7.2.34-84_amd64.deb
    sha:0b530ba40b1c14aa5b63b6bc4e499bc509d1efe5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.