[CLSA-2026:1784562674] Fix CVE(s): CVE-2013-7345, CVE-2014-1943, CVE-2014-3538, CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 15:51:49 UTC
Description:
* SECURITY UPDATE: openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding ciphers (aes-128-wrap-pad / aes-192-wrap-pad / aes-256-wrap-pad) - debian/patches/php-5.3-CVE-2026-14355.patch: the output buffer in ext/openssl/openssl.c was sized data_len + one cipher block, but RFC 5649 wrap-with-padding output can exceed that; reserve an extra EVP_CIPHER_block_size() for EVP_CIPH_WRAP_MODE ciphers - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php53_5.3.29-206_amd64.deb
    sha:c08aa426200600c59712586d1e426d7d1e41750e
  • alt-php53-bcmath_5.3.29-206_amd64.deb
    sha:25ab4be8c8ace4506ac3e2107eac2dac843b5a79
  • alt-php53-cli_5.3.29-206_amd64.deb
    sha:0d5fedd507d4891e758deeb268068c54ad366d77
  • alt-php53-common_5.3.29-206_amd64.deb
    sha:ec5064846ea93bdbe66f13af7b91994d81ebf131
  • alt-php53-dba_5.3.29-206_amd64.deb
    sha:47797a683f3c9093b9df3897d91ac9dc564f3b68
  • alt-php53-dbx_5.3.29-206_amd64.deb
    sha:9bc6db4ed00845c2da9313c97394039b930c565f
  • alt-php53-dev_5.3.29-206_amd64.deb
    sha:7cce45dbf587234b7e63f84332bacc9aa6e7b99c
  • alt-php53-enchant_5.3.29-206_amd64.deb
    sha:c644d0349a9a21bf9c67fd45def7beb4a5e7cffe
  • alt-php53-firebird_5.3.29-206_amd64.deb
    sha:5bdbeecec098b9fcaa761cd07255442370caaa22
  • alt-php53-gd_5.3.29-206_amd64.deb
    sha:952fb7127e2f317b0d39d66de78fa1c602acd3b1
  • alt-php53-imap_5.3.29-206_amd64.deb
    sha:88212214cd1e8a626d52faa95bb85fdd80362f6a
  • alt-php53-intl_5.3.29-206_amd64.deb
    sha:7dc094528d58f57df0e9c6c583a04f6013e43f7a
  • alt-php53-ldap_5.3.29-206_amd64.deb
    sha:9ea5688c6a387f42729f51973be7e3f59988fdef
  • alt-php53-mbstring_5.3.29-206_amd64.deb
    sha:9a6f87a68e71675b4c2d0a4559d5a1e100cf1210
  • alt-php53-mcrypt_5.3.29-206_amd64.deb
    sha:40fc81539d85b1200b291621630868667b6e4ecf
  • alt-php53-mssql_5.3.29-206_amd64.deb
    sha:e24c0e02ad951da52c2f9b254e546b2ac8a356b3
  • alt-php53-mysqlnd_5.3.29-206_amd64.deb
    sha:8e03a640442abe2f20b4745401cbe5817e674b14
  • alt-php53-odbc_5.3.29-206_amd64.deb
    sha:15277f5bb51a8d63673f6e97fb94a0660c6ffc7c
  • alt-php53-pdo_5.3.29-206_amd64.deb
    sha:240df54ec145e43ab6dc22a37a60efee41734725
  • alt-php53-pgsql_5.3.29-206_amd64.deb
    sha:5a85aad78e2f0a09b690a5b89de21b827d16731f
  • alt-php53-php-fpm_5.3.29-206_amd64.deb
    sha:bb0c61c81f777fef125940b9eeb6402859b18f7d
  • alt-php53-process_5.3.29-206_amd64.deb
    sha:cc8c91bc983dd850d9f016164ceed78a3380c96c
  • alt-php53-pspell_5.3.29-206_amd64.deb
    sha:49641e19bae73cbae1ee50f9c36cbca1b1a2cbe7
  • alt-php53-recode_5.3.29-206_amd64.deb
    sha:f79a4198fd47353f6bd416fa40338ca7aaee47c1
  • alt-php53-snmp_5.3.29-206_amd64.deb
    sha:b9535af30d1d75fddc98b766903d349c76fe0184
  • alt-php53-soap_5.3.29-206_amd64.deb
    sha:8c355e7334803742c85f85ee711be36881cdbec3
  • alt-php53-sybase_5.3.29-206_amd64.deb
    sha:cca6f675403a77ba40c6cc0fc602cd04cb86a8cc
  • alt-php53-tidy_5.3.29-206_amd64.deb
    sha:8b3efb082530eb1b6b69f7bd43ca8dda8a833746
  • alt-php53-xml_5.3.29-206_amd64.deb
    sha:14e7d4bfc33584e4558a146a6b9e3af69ded9016
  • alt-php53-xmlrpc_5.3.29-206_amd64.deb
    sha:94c507d4940e490b804da1974a00707380cab483
  • alt-php53_5.3.29-206_arm64.deb
    sha:3351a207d3f89e5c38b9de3fab8d5b39a52dec9d
  • alt-php53-bcmath_5.3.29-206_arm64.deb
    sha:c6ec927523b78abb703a1d19b6231ecd679378a7
  • alt-php53-cli_5.3.29-206_arm64.deb
    sha:ea183e01c282be7c43b6a14b99eb0089f33fade0
  • alt-php53-common_5.3.29-206_arm64.deb
    sha:de1958dd8fb7140a4550ff836c619a981d9c169c
  • alt-php53-dba_5.3.29-206_arm64.deb
    sha:78ecd4deb924aefb91743f679cd9145b3a465864
  • alt-php53-dbx_5.3.29-206_arm64.deb
    sha:fd7da59ee3bb61d372786254b980745541f826de
  • alt-php53-dev_5.3.29-206_arm64.deb
    sha:002534b1f25dc47ab5898a4d186b55009fb6b05b
  • alt-php53-enchant_5.3.29-206_arm64.deb
    sha:0cda6aa30d6dca4b9fd701e4bf7037403dd14c49
  • alt-php53-firebird_5.3.29-206_arm64.deb
    sha:3e036fc68a0737b0d7922b7e204584aa1ebb8974
  • alt-php53-gd_5.3.29-206_arm64.deb
    sha:cbfec0e5b33ba2c70fc4f9612cc00bf94f384cb3
  • alt-php53-imap_5.3.29-206_arm64.deb
    sha:e24a0d925666620c677caa4e1ba5110e8afa3d9f
  • alt-php53-intl_5.3.29-206_arm64.deb
    sha:a14eada774b2b719fa5684a1ad7d43cf4844843c
  • alt-php53-ldap_5.3.29-206_arm64.deb
    sha:a58c56a4bc77fc10eb11308d34f61caca33af5dc
  • alt-php53-mbstring_5.3.29-206_arm64.deb
    sha:a2b8229206159bb2b92536e1e4a67ac28c4357d7
  • alt-php53-mcrypt_5.3.29-206_arm64.deb
    sha:d9f523ccaa6fc35eedf92000f21c6942885064f4
  • alt-php53-mssql_5.3.29-206_arm64.deb
    sha:8674e0b8107c04dcc7d17a4ff7ea22afe0668dcc
  • alt-php53-mysqlnd_5.3.29-206_arm64.deb
    sha:3463fc0bd74762d2ce66e940ab77202e1b9707fc
  • alt-php53-odbc_5.3.29-206_arm64.deb
    sha:254caed9d886efaecf629e4e8f914cbdedb09c0b
  • alt-php53-pdo_5.3.29-206_arm64.deb
    sha:408841ffdbc32fcb1aeab04900109bbb7f173235
  • alt-php53-pgsql_5.3.29-206_arm64.deb
    sha:0d37aee6f38775ed9d21c6dd12bb239606aed701
  • alt-php53-php-fpm_5.3.29-206_arm64.deb
    sha:4ed0e3ac6bc9ecd8e933c7833afa005f213c19a8
  • alt-php53-process_5.3.29-206_arm64.deb
    sha:9cb4ee6e91a7652911ccd2cc1aa2b052b66f0716
  • alt-php53-pspell_5.3.29-206_arm64.deb
    sha:5f92bc2caa635b3f7cff59284cbdd55930653bd5
  • alt-php53-recode_5.3.29-206_arm64.deb
    sha:45d0dda039b8dd2227886da14d6cb95de387b9e4
  • alt-php53-snmp_5.3.29-206_arm64.deb
    sha:56aabbffd2c6a4335fdd5a7687b0c82ab4b1750e
  • alt-php53-soap_5.3.29-206_arm64.deb
    sha:39eda222ddea80aace13a32031bd56e46edaebc3
  • alt-php53-sybase_5.3.29-206_arm64.deb
    sha:a6dffa31989fa0429ae5c1c0b274a51c347603ea
  • alt-php53-tidy_5.3.29-206_arm64.deb
    sha:c1bf69356b4e6820b453c2c9f46d0b04d2de1d4a
  • alt-php53-xml_5.3.29-206_arm64.deb
    sha:95d7c338350fa80ba65b89ddcc1f82c651e5bb90
  • alt-php53-xmlrpc_5.3.29-206_arm64.deb
    sha:f2a5d0e04974dc090135a74ca75bfc9271ebe25e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.