[CLSA-2026:1784548970] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 12:03:13 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and corrupts the zend heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE.
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-84_amd64.deb
    sha:729fe7d88783870d218c9e2996431e8729e1ab8c
  • alt-php72-bcmath_7.2.34-84_amd64.deb
    sha:d89ea43ca4d70b21e9b77c646db18f573124c12f
  • alt-php72-cli_7.2.34-84_amd64.deb
    sha:3bc57c4bef2585cc12d3fa94d5bf3635e14a1d37
  • alt-php72-common_7.2.34-84_amd64.deb
    sha:74b147ffe7fe588e956ee9e4b7ba5418cdb2cc48
  • alt-php72-dba_7.2.34-84_amd64.deb
    sha:7656d15dabd580300632f0eb7a522e7c1f6e9ec2
  • alt-php72-dev_7.2.34-84_amd64.deb
    sha:b090839d32ab9d850d0cdcf2a297d506aa2e2bc5
  • alt-php72-enchant_7.2.34-84_amd64.deb
    sha:849d9562e734f9c17cb833dc382bed2895545ff5
  • alt-php72-firebird_7.2.34-84_amd64.deb
    sha:f4123b2c01a39e3e70f1b680239484de1b2aacff
  • alt-php72-gd_7.2.34-84_amd64.deb
    sha:41a874da929009f9420e8ecf34cb1491fa83bb6b
  • alt-php72-imap_7.2.34-84_amd64.deb
    sha:46e219d0d1d7008aff106abaf3de3cb048f098de
  • alt-php72-intl_7.2.34-84_amd64.deb
    sha:ad0b0a419a27fb178da4b719c40d4d11853f9442
  • alt-php72-ldap_7.2.34-84_amd64.deb
    sha:bcdf2392e211b1c39b5cf86ac4a2e75fc916d537
  • alt-php72-mbstring_7.2.34-84_amd64.deb
    sha:d1167093af9c44099b7b70259ef46db853e2b832
  • alt-php72-mysqlnd_7.2.34-84_amd64.deb
    sha:41c0d20ba4e3ffb28dccb271d25f9b08a0d40917
  • alt-php72-odbc_7.2.34-84_amd64.deb
    sha:dd3a8ce0df6dcea71ac3c06d1a183947f40b9101
  • alt-php72-opcache_7.2.34-84_amd64.deb
    sha:60cf2e8e724ed5104c0b71fc3391da1039ae96d5
  • alt-php72-pdo_7.2.34-84_amd64.deb
    sha:e2b89ee3a311a22525809ccda2495be66d8a37df
  • alt-php72-pgsql_7.2.34-84_amd64.deb
    sha:57035c5699119e7b4942e590b796b1ac3ff04827
  • alt-php72-php-fpm_7.2.34-84_amd64.deb
    sha:c96cd904874260d0756186476f18a4b3ee3135f3
  • alt-php72-process_7.2.34-84_amd64.deb
    sha:2bbced4076cf9475b641a121ba4147854376a098
  • alt-php72-pspell_7.2.34-84_amd64.deb
    sha:bf758e95a7671ecfbeec4cb88eb3a28c5f0da7a7
  • alt-php72-recode_7.2.34-84_amd64.deb
    sha:6a0664775e7e5427c4c94a435518f4f16ff60be9
  • alt-php72-snmp_7.2.34-84_amd64.deb
    sha:1969772191e3e7468701481df34ebe33612b3239
  • alt-php72-soap_7.2.34-84_amd64.deb
    sha:ff216de7152c86d78d73ffbbedddd49ee1039bae
  • alt-php72-sodium_7.2.34-84_amd64.deb
    sha:b9025a240d36fbedcb31bc24b95a16e01a66a9cb
  • alt-php72-tidy_7.2.34-84_amd64.deb
    sha:13646d3c9102191510841346efd35439341aeb57
  • alt-php72-xml_7.2.34-84_amd64.deb
    sha:2e4cdbfcdc17feda7da4c7ac9fd8fa39119d3127
  • alt-php72-xmlrpc_7.2.34-84_amd64.deb
    sha:afdff3cf0906e2055a798771c42f40f4da13c867
  • alt-php72_7.2.34-84_arm64.deb
    sha:b106a12966fc13dccfeaa62cb048e20d7b9dd832
  • alt-php72-bcmath_7.2.34-84_arm64.deb
    sha:12172894afef487ed738a5bab07095e046788b6e
  • alt-php72-cli_7.2.34-84_arm64.deb
    sha:bb02dada481e3f2e85528a47cd33b7b77356a7ba
  • alt-php72-common_7.2.34-84_arm64.deb
    sha:bfaf511badf2507941756e5d46177db76c955c57
  • alt-php72-dba_7.2.34-84_arm64.deb
    sha:0cedb1bb7da88aa4b2f2ac3e3aac7491a65dd634
  • alt-php72-dev_7.2.34-84_arm64.deb
    sha:6d7efb9b993d3587c7da44e9c6c0d42bee346906
  • alt-php72-enchant_7.2.34-84_arm64.deb
    sha:4e48fe38dde9d2c239c739298c03ead6269a52c4
  • alt-php72-firebird_7.2.34-84_arm64.deb
    sha:196f9650b017f09694142e7bc64e07421d669265
  • alt-php72-gd_7.2.34-84_arm64.deb
    sha:7ae661ca5fafc85f713a46af2f3e3afda12bd530
  • alt-php72-imap_7.2.34-84_arm64.deb
    sha:1cdc0be92236f18eeec6e4b1196ad9d859909881
  • alt-php72-intl_7.2.34-84_arm64.deb
    sha:8a7d72d5a52732ea6665db5eb391a1e39cb1344e
  • alt-php72-ldap_7.2.34-84_arm64.deb
    sha:14728aa7941e8d21e217a1fb726cdc98933aa55b
  • alt-php72-mbstring_7.2.34-84_arm64.deb
    sha:56c7b712d7ae1befe1fc6a11762dc6e5da4693cd
  • alt-php72-mysqlnd_7.2.34-84_arm64.deb
    sha:6aa25a3a399cdd0b3a78cd7e3904c22368bdb090
  • alt-php72-odbc_7.2.34-84_arm64.deb
    sha:10c69bf1dba1898b0c9da059fd57b24c47c287b2
  • alt-php72-opcache_7.2.34-84_arm64.deb
    sha:97f6e5705e99058c285f514cce73d2f406034ad4
  • alt-php72-pdo_7.2.34-84_arm64.deb
    sha:355cbf9cdf113b7336973079174eee4b8aec7da9
  • alt-php72-pgsql_7.2.34-84_arm64.deb
    sha:bfc2a4f6effaa6f8f55d5600b1f4ae61bdb1109a
  • alt-php72-php-fpm_7.2.34-84_arm64.deb
    sha:2adb7544e9b591b4ae68c36f9c8768b36ab5c84c
  • alt-php72-process_7.2.34-84_arm64.deb
    sha:168c83c1882c2f4c2ee202b5747c76c8ec3a7a51
  • alt-php72-pspell_7.2.34-84_arm64.deb
    sha:4dd82bb430a33658f99cf4c50d88fc6e5a8e4357
  • alt-php72-recode_7.2.34-84_arm64.deb
    sha:cf6ffc6f6242b5d9bd1c4140618cfcedf2f7bf27
  • alt-php72-snmp_7.2.34-84_arm64.deb
    sha:88e4fa784f07152a20a37b0ff42875b35bf63692
  • alt-php72-soap_7.2.34-84_arm64.deb
    sha:bd1ab6a69985a539cf18888c170e04a4972c0550
  • alt-php72-sodium_7.2.34-84_arm64.deb
    sha:dbfd2b19b3e4776a908ff3d557b15c12dd3db182
  • alt-php72-tidy_7.2.34-84_arm64.deb
    sha:16f8e2d0f4f8808cb2de3c061094525c3cc671ec
  • alt-php72-xml_7.2.34-84_arm64.deb
    sha:60f74a98f7fd9e7bbedba9ba829bd2ec9e7b2345
  • alt-php72-xmlrpc_7.2.34-84_arm64.deb
    sha:7def0b0f51da4b66b186db2cab31b66bf7d66ced
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.