[CLSA-2026:1784535905] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 08:25:28 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and corrupts the zend heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE.
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-84_amd64.deb
    sha:729fe7d88783870d218c9e2996431e8729e1ab8c
  • alt-php72-bcmath_7.2.34-84_amd64.deb
    sha:f47c8ec01a72529063c4779b5107d760d3873ac4
  • alt-php72-cli_7.2.34-84_amd64.deb
    sha:372f0a47c76e4fc969c2e71c041a1526f7b5b3eb
  • alt-php72-common_7.2.34-84_amd64.deb
    sha:7ab12541965cad3ddd690e7949bac270f1face7a
  • alt-php72-dba_7.2.34-84_amd64.deb
    sha:4ec5e02e545430faad758316cd88cda21a774eb0
  • alt-php72-dev_7.2.34-84_amd64.deb
    sha:20a64b7376f7246d53f486f1b6a5d83b0624d8f5
  • alt-php72-enchant_7.2.34-84_amd64.deb
    sha:62727ea12e61af709a108d2609f18aa2f281ef29
  • alt-php72-firebird_7.2.34-84_amd64.deb
    sha:aca78d03e587a90be061bdbfa85dcc406783aa66
  • alt-php72-gd_7.2.34-84_amd64.deb
    sha:1b926b51191edfea162abcdefac61596cbabdf8d
  • alt-php72-imap_7.2.34-84_amd64.deb
    sha:42fb0b955e93500f3263a94522e236f53e8f2f58
  • alt-php72-intl_7.2.34-84_amd64.deb
    sha:60449df9f905cb2b0378b720b0b1a1d8612b3090
  • alt-php72-ldap_7.2.34-84_amd64.deb
    sha:e9092bd4143f8d58ea9e7a8435b084dcc418af27
  • alt-php72-mbstring_7.2.34-84_amd64.deb
    sha:69bc4491501b0eb40cfe05dc02fd1d75e0e9532d
  • alt-php72-mysqlnd_7.2.34-84_amd64.deb
    sha:9e6010eaa6c4bda27e4bcdb4a7206329767ffaa4
  • alt-php72-odbc_7.2.34-84_amd64.deb
    sha:49221a6404cea5ed9e9307b60aaf6f01755992c3
  • alt-php72-opcache_7.2.34-84_amd64.deb
    sha:1f1dca4cb6658217b38cf21710e7dce7610a5a16
  • alt-php72-pdo_7.2.34-84_amd64.deb
    sha:aea27533c53410268418189df37a241ca326cb4e
  • alt-php72-pgsql_7.2.34-84_amd64.deb
    sha:c2946aef752b0f6485599a2890bef18c28888cf7
  • alt-php72-php-fpm_7.2.34-84_amd64.deb
    sha:c118296697bed770221cfe891eec16765ee11edd
  • alt-php72-process_7.2.34-84_amd64.deb
    sha:930014b3d17490c9ab23a4e19766b2093113161b
  • alt-php72-pspell_7.2.34-84_amd64.deb
    sha:8effe7c08500658010c95b3ec8c06fabf388e488
  • alt-php72-recode_7.2.34-84_amd64.deb
    sha:530fe82c7c5a23f300c7b33bd50604fc933579c4
  • alt-php72-snmp_7.2.34-84_amd64.deb
    sha:500afe89f29b1938164c83535f56fd32e009411d
  • alt-php72-soap_7.2.34-84_amd64.deb
    sha:708a05728a42335280dd5fa1e9bca2361d1e4ef2
  • alt-php72-sodium_7.2.34-84_amd64.deb
    sha:dee373577da374c0d8971df44ad9f70884fa0ebb
  • alt-php72-tidy_7.2.34-84_amd64.deb
    sha:33233f7ac7ee5546240003cfdb2b3d7eabab08be
  • alt-php72-xml_7.2.34-84_amd64.deb
    sha:7e8c6ba93564edba269a321c42dc72a3379eb38f
  • alt-php72-xmlrpc_7.2.34-84_amd64.deb
    sha:050bc9146d2a0f47ba0d254f3248e1a02245f8dd
  • alt-php72_7.2.34-84_arm64.deb
    sha:b106a12966fc13dccfeaa62cb048e20d7b9dd832
  • alt-php72-bcmath_7.2.34-84_arm64.deb
    sha:65b09f263603d46ab16c354463d2fc207062264f
  • alt-php72-cli_7.2.34-84_arm64.deb
    sha:f8345641cd4d7af3e23409817cda381e46436137
  • alt-php72-common_7.2.34-84_arm64.deb
    sha:62bc35751fbe5d3408ae084378c4409b87c47a74
  • alt-php72-dba_7.2.34-84_arm64.deb
    sha:5138f0564fe8075d432afa794b03aac615a0e166
  • alt-php72-dev_7.2.34-84_arm64.deb
    sha:db899521a8f2f005f9ce9000cc84df0632493db4
  • alt-php72-enchant_7.2.34-84_arm64.deb
    sha:3f91efd7eec700a212cbd1fad970e448c46481cf
  • alt-php72-firebird_7.2.34-84_arm64.deb
    sha:78a0bb8f6646a13eba9a55d1c8dee11386446ec5
  • alt-php72-gd_7.2.34-84_arm64.deb
    sha:22aab469efbf1dbb81cf162ac58e62bc7ed737d6
  • alt-php72-imap_7.2.34-84_arm64.deb
    sha:3d3d4229c2d3eaa03d1f5572dc5969d6d44f98db
  • alt-php72-intl_7.2.34-84_arm64.deb
    sha:885f32a17ba3b2dfceb85476c2eecdf42e8cf761
  • alt-php72-ldap_7.2.34-84_arm64.deb
    sha:470d2e754fba6868823ee72cd404c4cc98ae8234
  • alt-php72-mbstring_7.2.34-84_arm64.deb
    sha:ebb18cf0d5d93db3c326e7c8259baae1a40c6a9e
  • alt-php72-mysqlnd_7.2.34-84_arm64.deb
    sha:573b5f7e5e35a41cbc37fa88e2545b24a01c9774
  • alt-php72-odbc_7.2.34-84_arm64.deb
    sha:3c8b4826bdd827578fcc8d1d371845b18b5df708
  • alt-php72-opcache_7.2.34-84_arm64.deb
    sha:efe2c17fec777669b1b0d0f0febadb80e1e1e5e5
  • alt-php72-pdo_7.2.34-84_arm64.deb
    sha:ea84e8dabf998529bb1c56ff434e3a5320019130
  • alt-php72-pgsql_7.2.34-84_arm64.deb
    sha:81a96af59dc88b8202e94347635656576f663e86
  • alt-php72-php-fpm_7.2.34-84_arm64.deb
    sha:1faa5c044102123f486b92f9ae3bb61a7c2d038e
  • alt-php72-process_7.2.34-84_arm64.deb
    sha:d304bed745b6050ad03fd6f97aa9a2bf89768b5f
  • alt-php72-pspell_7.2.34-84_arm64.deb
    sha:a1569e4d1678e503ad1a8b2aef9801d680e50840
  • alt-php72-recode_7.2.34-84_arm64.deb
    sha:4cc9559a8728c3afb52502ea29a19122ebea24e2
  • alt-php72-snmp_7.2.34-84_arm64.deb
    sha:053785a6b91bc38518d3d8ba871709de331c9a4e
  • alt-php72-soap_7.2.34-84_arm64.deb
    sha:1ee4d7aaf953868e73f884f44f45b4dfae5395cc
  • alt-php72-sodium_7.2.34-84_arm64.deb
    sha:f3fdfa81b3a970a83ad4765037a4e37d84b34847
  • alt-php72-tidy_7.2.34-84_arm64.deb
    sha:83bfae9c299317d5d1e3b4cdfc26b37e5e3d84dc
  • alt-php72-xml_7.2.34-84_arm64.deb
    sha:e74df40b44ec2101c91d93e15098240518f1bbb6
  • alt-php72-xmlrpc_7.2.34-84_arm64.deb
    sha:a41c1c03c3813c9a58450dab5fa050e5d0c5434e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.