[CLSA-2026:1784550868] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 12:34:52 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:af6335fa204f8012b0bd942be9b0e305ae5dabc8
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:cfb628a926e6456298df210f169d3e796d36af02
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:7ce0b7531308a85caaef297693d4810ba91b882e
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:58693eaf04d5e08c71cb583e9be0b496f5a35b95
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:0c48eb523080dce78d1cda779c6c004b8bbfbbf9
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:7fcf3ead28fb9d4c1fb531498fe6e064e139fe39
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:e9350ff3d2064fad6b396e27afd10442c7d62aea
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:24137c8a04438fc19f2d734c468f57fec7440e71
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:2d54f9e9372577ebfb0339e2179f53a5f10cedfe
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:059c87ed3816079e28fdeee7a0afe23f213c295b
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:95f1a62d9de7b550d83f9e97214f7a486ef396c2
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:7e71bdf69fa500b4495bf40b954a1b7f24118a5f
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:83f86e57a0295d6b54c7acc3f323ab7690c6f4ee
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:61dd58399ec5fc69066571fda89d80e5c813a36d
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:01277f4bdfd325d5f4c194e98f008dd10e1da626
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:6763bd43ae3d0be0e8f8256f63e3a95628932331
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:e7e60141a34a271082e9a7dbf6d10c43bbdb4a73
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:496f74b1f91df27576ad4362f0533343a7a9df3d
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:a924da3ff65ca6a76a54f3488a079d2975574a13
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:16601de176c2a6e0bfd129e3cf2ed75a0cf4a42d
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:d64e6461b1a2bbacf7a25b90f9cc7c70076b3013
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:5c855667ec6b9bcf171a9463b49e8d59a6669e78
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:2a35e025756e731df4da4c67e484ca7102ac5551
  • alt-php74-sodium_7.4.33-64_amd64.deb
    sha:202458f97a3a472e5f2c0ba1e22dc9a8c77e3ef5
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:ad4d310b93e306b6b954ddfdefd932bf893b7fe7
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:ff71c35b87094ca4bd788f8464e8ac1f3a93187a
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:61e312314bd886ea63f98ba399b1508c8026a142
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.