[CLSA-2026:1784558554] alt-php55: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-21 15:43:00 UTC
Description:
- CVE-2026-14355: heap buffer overflow in openssl_encrypt()/openssl_decrypt() with AES key-wrap-with-padding ciphers (aes-*-wrap-pad, RFC 5649) when built against OpenSSL 3.x (ELSLANG-59751, ELSLANG-59676, ELSLANG-59675, ELSLANG-59687, ELSLANG-59692) - debian/patches/php-5.5-CVE-2026-14355.patch: backport upstream cbc0489126a7682796aad1e5fb4e51de74af162c (GH-22187) - reserve one extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers at the output-buffer allocation. 5.5 has no php_openssl_cipher_update() helper, so the fix is applied to both inline call sites (openssl_encrypt + openssl_decrypt).
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-167.el8.x86_64.rpm
    sha:1df0e9b8ba53c17e77d5505137ea6687ec472d3dca20cccc66dca154e3ad9778
  • alt-php55-bcmath-5.5.38-167.el8.x86_64.rpm
    sha:e960e50e3051e6a92c52c86e586fb730ed7b871a78663d6a6453402e7044ee66
  • alt-php55-cli-5.5.38-167.el8.x86_64.rpm
    sha:f910a2499668cc782ba4887432753debec374622dbb914b6cb34e9f0107eda5a
  • alt-php55-common-5.5.38-167.el8.x86_64.rpm
    sha:0dd4a9ab4f84143f7a32eaa09f0dec102434cc488b980ba703a6fffe23dd68c9
  • alt-php55-dba-5.5.38-167.el8.x86_64.rpm
    sha:0db4bd9c9020d8b1a375f726b721d988a2028e563dd727a9a7c45d083035eba1
  • alt-php55-dbx-5.5.38-167.el8.x86_64.rpm
    sha:e2227b5357d6202b344bc827afdcd526f1ee0d41a35631c2559f994d77c05b7b
  • alt-php55-devel-5.5.38-167.el8.x86_64.rpm
    sha:3e62bd3000888b339d20fab17e6a5814c87fccfbd85eb4abf058e1d92ea3a464
  • alt-php55-enchant-5.5.38-167.el8.x86_64.rpm
    sha:495549042914c2f8d824c9267ffa5831a0b433407258c7b026d8f8a0b3528433
  • alt-php55-firebird-5.5.38-167.el8.x86_64.rpm
    sha:78355ad6056fa38a9accfab0756ff360592ca9b78b3fc6a1178e2898be09d05c
  • alt-php55-gd-5.5.38-167.el8.x86_64.rpm
    sha:7a22c66b6c3a0f8613a310e487f0649f73d049325c3d00ee8c9186c28cd9b05b
  • alt-php55-imap-5.5.38-167.el8.x86_64.rpm
    sha:7b3f3efc7723ded59baddf8ea159e4e479ed0de0a1e14accff7bea2738792404
  • alt-php55-intl-5.5.38-167.el8.x86_64.rpm
    sha:a6c5a1cd83e6ceef5748409fa284065d7d3c05c09a1e73d4fb21bf1289a28e57
  • alt-php55-ldap-5.5.38-167.el8.x86_64.rpm
    sha:ddc19db1ce4a50c5c6cb0c6d7ceeb4839d9ae0059591c01c289b8ef1bac7183b
  • alt-php55-mbstring-5.5.38-167.el8.x86_64.rpm
    sha:23a8ae1d35bc597a076f932fe580d3d68a300fc10c45c1b7418614a1429c6d43
  • alt-php55-mcrypt-5.5.38-167.el8.x86_64.rpm
    sha:2a4188b94734676bdaf30b1cec7092ba6e9773fc27baeb031e441975607ae4e0
  • alt-php55-mssql-5.5.38-167.el8.x86_64.rpm
    sha:f15507c5bf2615758428b88c2e09001005dffcb390c1c1e466a50498ce7b057d
  • alt-php55-mysqlnd-5.5.38-167.el8.x86_64.rpm
    sha:908c317ee88cc1f02c55631c7b644e1377456025f1d2a04c1e3a0fb99b462a1c
  • alt-php55-odbc-5.5.38-167.el8.x86_64.rpm
    sha:4317e8d1d2f489f8bd560e646c80e07fc7a7def329b9e46a1d5f9f50b15a2bbc
  • alt-php55-opcache-5.5.38-167.el8.x86_64.rpm
    sha:29186f81b36b672ae2d9dcf9510331da2b69d91674d76baa311faf7eccf68ee6
  • alt-php55-pdo-5.5.38-167.el8.x86_64.rpm
    sha:b98eb44f244639e93af09aa0eaf94363cfe6e0db5431f70f8fa57921ba4ac8f2
  • alt-php55-pgsql-5.5.38-167.el8.x86_64.rpm
    sha:f5604bbcb3c395a67ec95138e0f5244b69cc201c7121832ca8774785a6548878
  • alt-php55-php-fpm-5.5.38-167.el8.x86_64.rpm
    sha:0567724fca284b67ef6560fa6a36dd160a4d45ed61a53467d4f39a147fc6ea53
  • alt-php55-process-5.5.38-167.el8.x86_64.rpm
    sha:fd45f2ad573cd02142409d826c989c9a1601b811b45809d37e5d130b2c9e283a
  • alt-php55-pspell-5.5.38-167.el8.x86_64.rpm
    sha:5d4d7b90fc52901c8d055907c350ce33de5ff64c2234a38433ea9bf43ec59b34
  • alt-php55-recode-5.5.38-167.el8.x86_64.rpm
    sha:959aa3bd5b14e8787d9dd68fe8edda6681fb14ebefd0ffd40151ae993815165f
  • alt-php55-snmp-5.5.38-167.el8.x86_64.rpm
    sha:a50f75d2fdc8957f215da2c352bea2f777fa28f6cb2d6b09d7ebfa834a9d10f9
  • alt-php55-soap-5.5.38-167.el8.x86_64.rpm
    sha:36769ea0f091f3a9243d6baf0609fb1e1e250d1feca147874926df91f4d9481a
  • alt-php55-sybase-5.5.38-167.el8.x86_64.rpm
    sha:55a71c4614e63c0225c9bef45f7aa362e7acc2cdc71d1ffa1f4dea9764ae7380
  • alt-php55-tidy-5.5.38-167.el8.x86_64.rpm
    sha:cefdfc85c18eb4637dd37a3e50bae7b2c8882693a870cc9085286f4234696b09
  • alt-php55-xml-5.5.38-167.el8.x86_64.rpm
    sha:2b37c295b0d3b794fcc12b93c9791486fe316eb3fd22d5881023de9939b8d483
  • alt-php55-xmlrpc-5.5.38-167.el8.x86_64.rpm
    sha:a4698f2b21b9bc3e38b0d597a7c6b8c6d4e31f2fbfc6343ec13dca3479b1f681
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.