[CLSA-2026:1784554869] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 16:58:29 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:ed851ec73fc0ba8d684d8503d0021e29104d5e50
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:fb5c2e17c81b0a16fc1ed4bc2ccc17a68047edb7
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:38fef3bd31c0dbcaa7d5e3921e9d0992fe9f2428
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:e654355fa91af0a93f00522313e2128eaa931117
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:424ba0ac90d2f7398b232b81cb386c60eeb3bb3a
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:f385bc6d01bd147a12716ee53b19600d63111c62
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:5d99f86c06a4b89eb4208976ff4b1a1475f617b0
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:baff29203068f54a5b3947b74c369b1122ded909
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:e9c6bcdd5250e3d6e91e368ea1022c154d6fe945
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:3925e6d3b11ecaf10ab2881636519ad3f529c483
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:fd44449be62ac1b6061f915dad0f2fc29d5c0973
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:e637989faba5f55fec87979fa7f4abb3c48933db
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:6a0083bfd324451569eea8627ee6c20bc5aa5550
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:1c493722865036700b8c816e9021867915f93093
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:719251c7b938d2fdde3eb795d488dff6ded914b2
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:87d63fdd0598ade7e051171f665db7985e0b1a6b
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:f227a23abd66d9b2a5771688990316104bae0ac8
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:b22b82d6199b5193742ca805a54025c2fa254765
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:be027a9813bfbf4b605975d13435df887796591c
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:ac34eddd62a5734831c997e535610dd2643c9d35
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:f4b7a00d2b07441f9be9fd3c462f6a1bb65a342b
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:4f6f1d8bdd95e4ff5fade3d1995d1425c69e6ad3
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:134d76f65173b6fd6d95a1562258719674a42558
  • alt-php74-sodium_7.4.33-64_amd64.deb
    sha:592f2d472880bb4576355dff43bd966548666e59
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:8b4753a0b79c8c52191812a45f613471af314110
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:5285220e4a6a43b7b32126122faa641d3a7d27db
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:1ed2b92fdfac53f09a048b7d0ce10ffc367f6d14
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.