[CLSA-2026:1784562159] alt-php71: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 15:43:06 UTC
Description:
- CVE-2026-14355: fix openssl_encrypt() zend mm heap overflow on AES key-wrap-with-padding (aes-*-wrap-pad) by reserving an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream cbc0489126a7682796aad1e5fb4e51de74af162c)
CVEs fixed:
Updated packages:
  • alt-php71-7.1.33-100.el9.x86_64.rpm
    sha:cb64cb1e8a9d2dfe4523b343fa43b82cbd4217a08c4e2c7a0b418c3b5cf73a8d
  • alt-php71-bcmath-7.1.33-100.el9.x86_64.rpm
    sha:dbc4f7d6857acf5f8c77b6fc366720e2ed68322640f6913669debdd9e1db5c53
  • alt-php71-cli-7.1.33-100.el9.x86_64.rpm
    sha:acd83e0e8b594cbb81c9dc17b1e61b1f7c0902bc8dcf10ea4595fba1c98b4136
  • alt-php71-common-7.1.33-100.el9.x86_64.rpm
    sha:e01227ea3a57c70787f7d7d5da039d131a9177691b8a33399b3b67a122569b49
  • alt-php71-dba-7.1.33-100.el9.x86_64.rpm
    sha:21c8ee45776a8b5317096d9367a950762372def0392cc7882acf1ec12ad4757f
  • alt-php71-devel-7.1.33-100.el9.x86_64.rpm
    sha:d8ada212969f8e53adba17e48f2ddd4fde164bae1294ce11c0238ba82eb4bd40
  • alt-php71-enchant-7.1.33-100.el9.x86_64.rpm
    sha:3c1e5bde7df895448e34a4ac44e3c8c36e99577bc59211763f301a6a09aac316
  • alt-php71-firebird-7.1.33-100.el9.x86_64.rpm
    sha:c94da420665d462bdae4cac8f6ae0a10535317a402c3af29eff22f4c0d41cded
  • alt-php71-gd-7.1.33-100.el9.x86_64.rpm
    sha:8e4fb281b43ea41e105d1645229007fd53dc167548dbc4f71fc875886a9fab18
  • alt-php71-imap-7.1.33-100.el9.x86_64.rpm
    sha:5c776619e196579afa4b09b0fd2ccb48ce9fd6d4c3cd1a0fa2e643fe4ce09793
  • alt-php71-intl-7.1.33-100.el9.x86_64.rpm
    sha:d43c18c90f82138e688156dbad17b25f12c82b1e24a3c4c25278859b0c9d25af
  • alt-php71-ldap-7.1.33-100.el9.x86_64.rpm
    sha:463629d67bf6c18d6f7ebc18e3c5c381d13a72469435a6d2afca3323beb38ec4
  • alt-php71-mbstring-7.1.33-100.el9.x86_64.rpm
    sha:83edc1fa232e057f7699827189cd968713ed2d0d9a710036be61e9a3594427ef
  • alt-php71-mcrypt-7.1.33-100.el9.x86_64.rpm
    sha:46d061e81fb64934dcc70d156ebf5206c874ad95047127241b998e58eed29d05
  • alt-php71-mysqlnd-7.1.33-100.el9.x86_64.rpm
    sha:16cdb68e1303f2baa2e513a82b1bf2ce25f7dc182c03ae38d756c320cffdf986
  • alt-php71-odbc-7.1.33-100.el9.x86_64.rpm
    sha:d0b46c418b7c17ab7a90cbb44eadaf6d2cf8c814743a0ab1945178a0060ff0b0
  • alt-php71-opcache-7.1.33-100.el9.x86_64.rpm
    sha:ce66406c85e607d3b6af56b18628f7a926147cf9e7ccc8df75ab66226efbc134
  • alt-php71-pdo-7.1.33-100.el9.x86_64.rpm
    sha:10a41b34296f46f4a8e678cc3974430b75d51191e22fa2080fdec3ae99c576e4
  • alt-php71-pgsql-7.1.33-100.el9.x86_64.rpm
    sha:0005a0a9e420ea7d1b7a2f9bb122e598a626b914ef3ff3fabc7ae0bb23d8076c
  • alt-php71-php-fpm-7.1.33-100.el9.x86_64.rpm
    sha:f83b752393478dda8e610bf73b8b92fffbe07ec91c13d8cde65b92d554ef965a
  • alt-php71-process-7.1.33-100.el9.x86_64.rpm
    sha:e39f2a7eb8bad4d051c64665107bdab515a3d0b97d1e2e6307f2d263a396c41f
  • alt-php71-pspell-7.1.33-100.el9.x86_64.rpm
    sha:c927f8c417dc03a59f363ce028dc9ad4637c3de28d3e111cbaa992e07aac2d7f
  • alt-php71-recode-7.1.33-100.el9.x86_64.rpm
    sha:465a31f5e8993e2a5a9d7354de8a8846fe305169493fd6a87354162300e8ddca
  • alt-php71-snmp-7.1.33-100.el9.x86_64.rpm
    sha:d3beea764f38a283e716333822271b88e86d8a528a546a5b8100865e63baad6b
  • alt-php71-soap-7.1.33-100.el9.x86_64.rpm
    sha:12cd9c1810555d2a1d1b54a7a8962137ff0574ab85eac244f964279f10923190
  • alt-php71-tidy-7.1.33-100.el9.x86_64.rpm
    sha:3266977279112190c978017eb24a56e3f2994ad40960340b3fbe3354bd63d164
  • alt-php71-xml-7.1.33-100.el9.x86_64.rpm
    sha:fb73f0d1bf6d94d3d0eede1f7c0d901ae8c6f51079725306291cbf7cf7c82fac
  • alt-php71-xmlrpc-7.1.33-100.el9.x86_64.rpm
    sha:917b7def102613a486f58ea02742c1876695126ca30419eecb77a7d956012309
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.