[CLSA-2026:1784550021] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 12:20:47 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:33211efca332b56a30eeed37a1469e0950def315
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:5d10862c0e00046520e71c0df141a097f7938131
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:00c7bda0984fbae7403f1b30bd2a907626a1b323
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:c566b43360bc6375118494e8a5e68caed6cf5cb7
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:5fcf02be06a16a96559bfe5bdbd738e647d07688
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:18659f408240f27b4f8ea81ca5d53b788c168116
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:216cb9a210db7c83a2bcd3fa114768240bf5b112
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:9c5219947202cdfb1b9896c7f7f187c017b26546
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:9de58bda06b3ef0bd47135733de6822d6aef7428
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:833aac6ec08e2e12567f3993eb91508e5ad4689d
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:6a81651fcf091d7682f385e56024b1ca905ef3e5
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:9916f4f4a6e2bc16caa0f3eb9b8efa7c2dde37d6
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:6fa8dcb01881119bed51497af3cade114a671e02
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:fd3429172dfec2058e97a9f8a2c1332246385d55
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:4cde84a661aee97d5ec2c58d3d972aa125265d2d
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:254c30d2d234c3d20aadc92185485c9f60ed632e
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:f02f2c57799d8980fa77fac5b4788dfe5e739b57
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:49e5c3b48b4262daa62df1c9618694a472baacbb
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:eda8bd588d84ef30944cab91edd9a8b29c9f4bef
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:4c64b12a9e560f89e50585a43bfba8d3b05df7ec
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:f5e5f618e9295d1d6ab92b176f71e5b1c910da90
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:06fd496fbe586a868fd232a9c8a1f03932e4deb9
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:d45755e6cd16486f79e4bb3d3835159e675ed9f3
  • alt-php74-sodium_7.4.33-64_amd64.deb
    sha:8f460e7b5704b9784abe12869011c0456136f1e1
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:de98c440ba9916b78d2bdc0822f6989fb9992726
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:73fde557097edb5aeb674174d11a3573f10300a6
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:2432bd29f71bbef176cf17807339b00ac2c02958
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.