[CLSA-2026:1784631672] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-21 11:01:41 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:36bb0d7413f5ecaf29cbf32691675f61972ce669
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:68a26860e9a621f8bcf25b8ecc043e8961008ad2
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:de8af2505c0d68f983ee547aaa7adb3df507854c
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:ef288eec7f5dd9fbce112cbce67ff8ad313e8dde
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:b9d30b6ee68b34e9ab706c65c3794d8c03e7ad0f
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:85d16666c7fe17e7a93421c385d560503b732519
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:2cfe08953cebec9d9d13bfa51e883b9c283f52c6
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:315cdfb0c42fb8671113b6381349edd13d3b413d
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:ccbcbde0e9fcdf93a0579d723e5fdff3046c6e21
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:02a086072afc2b476d155d11c0f03229a8d1da48
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:cf0342ada0400228443f4eccd49d7bff986f62ff
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:49d6b0714f03e5ab1b5d36c1dc5a6d834a816f87
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:3c63c1f6d96313c18dacf2d43b018e04bf7c7749
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:364e97d2e5decbffc7e172b3a64c7ce08ea9660c
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:0ed5ed0728f768d752dc27bf9a8550bbbbaa3d06
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:70807e8696e2762615af691699d7e10252a173a4
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:17464e1dc9a93a2ddbd1e2ab69aa186c8b43b801
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:f81b2fee281570b05d53726e4cc06c9e8134b815
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:a3b7c146b97704bc93865a40412720f3e9fd5939
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:db792ef1bdeb408585303252f1dbab22c94092bc
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:6801d45ef3156f79d8fcd311c0de8959be5466fc
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:c2681ea0d4683a905f7048e136a4cf56345e4bbb
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:42d65f9e0e556c1c4d326c2d96ee2c4b34ffb0f7
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:bfa9a1b200b425bda8c21ac7aae057e364435f63
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:f066946499231fab4b80ef7c4fa9db0cbcf6ca09
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:2f8402f502116ec68570f71ae62e8409b99dd209
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.