[CLSA-2026:1784554346] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 13:32:51 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:f711ef041777a2fe6b9e88ca91a758181dd48015
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:146af67a87187ef42809c2eabe037d62df84a341
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:d04c1a4f76d83e339b3c79a53fd1d33a8ac66698
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:1b259b25d8e622fb3266c590037ca025fbfff1bf
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:2272d55906c4668e684824da4954b6ae93ae29bb
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:7f20b0b0f7480763054be5e4d589074b9c72c598
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:14030b0404cd446b3538cb47d4c557a8819aa8a9
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:48be8703977af75d1ee3ca56365595b546b166c8
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:0c72c35c2934e5cd1cdc0da348d8ddb17e71bcab
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:68dbe7e3e08a36df750cc58c59cd72b5005cb216
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:991fb99e9bc068a9bd2472157368271ff3843d50
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:0a167805e86f56429b6eb2b8242f2bcf62a045f3
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:c1ee40ff3f004566e566555fecd3fc4c947d0939
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:b404a50f058871098d1287c27fff9820948b8934
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:2feeed01518b381c5cb28f7d1b0b1226b3403dd2
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:47ebf535517fc5d5c55610b0276ff1181c6d1045
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:ae489851a6ef3576175fef5b2e2682397f373329
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:3b7e2dc35b04a446a32d5b34a4abd00f05542822
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:f4bf4017db61bb983d048b44c1962b29ee3fcdc7
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:13ec99291060d398339bf91b3f237f597dfec1e3
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:bc8f7d4165d6e5f2043275653ecea25e82612a4f
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:bb4a6279e497834df4e6ad8e5671bed7475adf0f
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:6a7a368153ee9b207182ac02c59b9444bcc3eab5
  • alt-php74-sodium_7.4.33-64_amd64.deb
    sha:3671f7ef25020e6c374c94619f7a988d99b34c0f
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:ff7caa6068f59ba0cdfe30ac314932920186facc
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:cc107596922baf872a9ed239d2f7397f745ae5b7
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:cbd778c9a4487421d5b0a41eb0b991cd949299de
  • alt-php74_7.4.33-64_arm64.deb
    sha:e532b976e338f863f9a0cb93deac4e63a700dc31
  • alt-php74-bcmath_7.4.33-64_arm64.deb
    sha:1a882254808dd9162d75e6832aa020217595ee8f
  • alt-php74-cli_7.4.33-64_arm64.deb
    sha:127efb68b3db43a5e3509ef9ca5f1117449adb29
  • alt-php74-common_7.4.33-64_arm64.deb
    sha:4fcfc78d7535cb88fe547e3dbb3826b85b459d63
  • alt-php74-dba_7.4.33-64_arm64.deb
    sha:1cdafc104b6c17cec3eec9f3045cfacfdad66b03
  • alt-php74-dev_7.4.33-64_arm64.deb
    sha:e5e5f816fe316410fb846faf524ed8eff6732780
  • alt-php74-enchant_7.4.33-64_arm64.deb
    sha:e63220daad4e1b121a0af80165f150001ebca01d
  • alt-php74-firebird_7.4.33-64_arm64.deb
    sha:c5772cb79d9520be20e18e36346be863a5b05f04
  • alt-php74-gd_7.4.33-64_arm64.deb
    sha:8bf38fb38bf67b43255f72953659ee241689eae3
  • alt-php74-imap_7.4.33-64_arm64.deb
    sha:14667b9efe8ebfcd673f283834664dddddc754be
  • alt-php74-intl_7.4.33-64_arm64.deb
    sha:e99b095fc29e6191f06564e9d17d1dadb4c61119
  • alt-php74-ldap_7.4.33-64_arm64.deb
    sha:14c95f3b6caff5c18dc7dcce23f08e6f12db5773
  • alt-php74-mbstring_7.4.33-64_arm64.deb
    sha:62907f3f36b95c4fca4833325e1dab881a4403ad
  • alt-php74-mysqlnd_7.4.33-64_arm64.deb
    sha:ea0f281cadfb4d77bfb2440b083358c8675263c1
  • alt-php74-odbc_7.4.33-64_arm64.deb
    sha:47df8bcf8619b7cd6f8c0fde6cdf0eccd49cd7db
  • alt-php74-opcache_7.4.33-64_arm64.deb
    sha:d2e1c48914fcfe575075893b495b94de0951a64b
  • alt-php74-pdo_7.4.33-64_arm64.deb
    sha:43e72451d90448c5a508a9b03eb495ecd12af9fb
  • alt-php74-pgsql_7.4.33-64_arm64.deb
    sha:efe0a439f83fa8eb52d09b119cbfee7db7a85b90
  • alt-php74-php-fpm_7.4.33-64_arm64.deb
    sha:8ae963f41ad9c52bff0251f383c696c0f2599fe0
  • alt-php74-process_7.4.33-64_arm64.deb
    sha:83f4e6bf7e040a45aec19c96637274917c81f0ec
  • alt-php74-pspell_7.4.33-64_arm64.deb
    sha:e3e9c88a3205bd372c858277392721afbec5b45f
  • alt-php74-snmp_7.4.33-64_arm64.deb
    sha:94fd89bd468f1d79412d2382ebc2af97a71b64b9
  • alt-php74-soap_7.4.33-64_arm64.deb
    sha:27ffbcb15fde5e9151e80e796a5a842b76bc9d8f
  • alt-php74-sodium_7.4.33-64_arm64.deb
    sha:c580878b68b85e954f6245175858b3b89d3d2aa0
  • alt-php74-tidy_7.4.33-64_arm64.deb
    sha:46b9b647864300af6b3b6d1d0267eaaa8429014e
  • alt-php74-xml_7.4.33-64_arm64.deb
    sha:7aaa4e626d3efe55181c7d1bd36e51c2d5d9cf71
  • alt-php74-xmlrpc_7.4.33-64_arm64.deb
    sha:51f6b563c7e9a059f3f480f94867e7fce417bd8e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.