[CLSA-2026:1784552919] alt-php71: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 13:09:05 UTC
Description:
- CVE-2026-14355: fix openssl_encrypt() zend mm heap overflow on AES key-wrap-with-padding (aes-*-wrap-pad) by reserving an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream cbc0489126a7682796aad1e5fb4e51de74af162c)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-100.el8.x86_64.rpm
    sha:5dbcfc9954cf75c3420c2857b4b6a1f3b8e92d20ebf187728365edc4ce4fa241
  • alt-php71-bcmath-7.1.33-100.el8.x86_64.rpm
    sha:62519349502e8fdf991a2abb26a12c9eaae0dbcba9bd24f88ab8521ff0471941
  • alt-php71-cli-7.1.33-100.el8.x86_64.rpm
    sha:b544de10dbc6023fb5075c8bd9decc1e9fe2caca9f3fbb93d051c0c56ec98b53
  • alt-php71-common-7.1.33-100.el8.x86_64.rpm
    sha:81859dfa739f37d465190548e0a07a6b61d41f395f7bc66349b8867e2f496997
  • alt-php71-dba-7.1.33-100.el8.x86_64.rpm
    sha:fa94f719e7e9431902312482b8493aedd89df21cf77857ab00d2f15bb8d86a80
  • alt-php71-devel-7.1.33-100.el8.x86_64.rpm
    sha:7193e418e6a5d3744ea57418358aacb3a3716ba06bfeb0021bdf6f873fc8f6d7
  • alt-php71-enchant-7.1.33-100.el8.x86_64.rpm
    sha:bc69616ccd7db56070b21c9b62fb62ca257cbab358f914d0b05ab449f1644a1a
  • alt-php71-firebird-7.1.33-100.el8.x86_64.rpm
    sha:a307fca709d18289a3ea3076779b31581a07f2fd60f0a68e2251eab16cb0f202
  • alt-php71-gd-7.1.33-100.el8.x86_64.rpm
    sha:4cb10581138d0dfae54f8d9535bbd40f5b7088146569b19cc213d70d280bc1d6
  • alt-php71-imap-7.1.33-100.el8.x86_64.rpm
    sha:c942c99d85faf358491fab79e4015b24c5cb45f27cdae0b6163b0a60baece500
  • alt-php71-intl-7.1.33-100.el8.x86_64.rpm
    sha:6d461af986e3cabef4b789c394dacf156b40e916557533b0c2140cbd7f6a04d0
  • alt-php71-ldap-7.1.33-100.el8.x86_64.rpm
    sha:ee196f46c01a0fa808295d2e234b348fd32a6ec9d17e049bc5547041773954e5
  • alt-php71-mbstring-7.1.33-100.el8.x86_64.rpm
    sha:18c2c764fc85ad7321ef628182419aa4c9572a121b9022fc1cc5822555d997a8
  • alt-php71-mcrypt-7.1.33-100.el8.x86_64.rpm
    sha:7229ccc0e3eccce36be1f601b87c200dc2c633732e1cacfc67723c4da861bd4b
  • alt-php71-mysqlnd-7.1.33-100.el8.x86_64.rpm
    sha:b33d20a33ae9a91b57a7c285ee8681a58418e244075d68b6853da06b69b243a6
  • alt-php71-odbc-7.1.33-100.el8.x86_64.rpm
    sha:42639382aea8f20c0f1d766ea82673413990d37d304f688b99c0c18956221f87
  • alt-php71-opcache-7.1.33-100.el8.x86_64.rpm
    sha:c28b54ed193e322952079218f81300bc2bec92ed334c0aa7c11141e7b6bfccd6
  • alt-php71-pdo-7.1.33-100.el8.x86_64.rpm
    sha:52f31616a6dead39bc5fbfba97a169adb4a5696fcafa119fee8b80afb79f16d8
  • alt-php71-pgsql-7.1.33-100.el8.x86_64.rpm
    sha:79ea9cae5f51b3ed7340d001b2c5cc6504c761eaf3799ebc29e0d3451e4bce82
  • alt-php71-php-fpm-7.1.33-100.el8.x86_64.rpm
    sha:8a5939d9eb4cd30695bab8581b722b4178cee02e16acf3fd3bc3ef8122430b4a
  • alt-php71-process-7.1.33-100.el8.x86_64.rpm
    sha:856203486c477238af3e40df7ad18cbcc661d2c126ef7d28422535d296c51c6c
  • alt-php71-pspell-7.1.33-100.el8.x86_64.rpm
    sha:e32774066f85b678e05d0a753c302c7d88a9eb9e0ae7ab945f543a0365423a95
  • alt-php71-recode-7.1.33-100.el8.x86_64.rpm
    sha:d911f9287874df791b0bf26514abbfa5613910c83922ab676f60c0fe62e90535
  • alt-php71-snmp-7.1.33-100.el8.x86_64.rpm
    sha:211a677fef8f48c5e8a127329dfb09757b4c78494fad1608d071995fdcf2ec2d
  • alt-php71-soap-7.1.33-100.el8.x86_64.rpm
    sha:a3752dd97c0e7edb6f9dc44dec64f325582f0a27ac3a38f484c30facf4ee77bb
  • alt-php71-tidy-7.1.33-100.el8.x86_64.rpm
    sha:63d05631cc7165722347d6a4d7e3309581beae2b1bd1a118b9258a0d87a43f47
  • alt-php71-xml-7.1.33-100.el8.x86_64.rpm
    sha:020ec4d9d5677583827d7ae33c39f4db447cf31d7e99d92c71da4d7198980e2f
  • alt-php71-xmlrpc-7.1.33-100.el8.x86_64.rpm
    sha:75cc45070193f3ca949646ebfe3f995ce434a324939bffe4d43277218429ea3b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.