Release date:
2026-07-20 12:42:00 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding
(aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one cipher
block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and
overflows the heap when built against OpenSSL 3.x. Backport of upstream commit
cbc0489126 (GH-22187): reserve one extra block for EVP_CIPH_WRAP_MODE ciphers.
(5.6 has no php_openssl_cipher_update() helper; the fix is applied to the inline
allocations in both openssl_encrypt() and openssl_decrypt())
Updated packages:
-
alt-php56-5.6.40-133.el10.x86_64.rpm
sha:3ea192533a4eff9be5377b3a4d8670ce3212fee272f044043be95fd8111a0e95
-
alt-php56-bcmath-5.6.40-133.el10.x86_64.rpm
sha:cb76e9361e274dbf64b5eb8dd2e1d9575e176fc14db885d0e45682abdf6ad7e9
-
alt-php56-cli-5.6.40-133.el10.x86_64.rpm
sha:3fe23ddcf63e3fdd6e051f1738ada8747b4d966a95870774da36b546aa4928db
-
alt-php56-common-5.6.40-133.el10.x86_64.rpm
sha:75cd962b232642120fffdcb76001513ea64619328edf091e9aa1fdd69f975da8
-
alt-php56-dba-5.6.40-133.el10.x86_64.rpm
sha:bab43e8d1281df4fc355c40491e76b863dd41e701d2bf4bfbb17a5bb2d0cb191
-
alt-php56-dbx-5.6.40-133.el10.x86_64.rpm
sha:14a7e0dec83da39b346707daeb56dd8551ef24bdfd55212cb3144b810846e648
-
alt-php56-devel-5.6.40-133.el10.x86_64.rpm
sha:f3b7054f0bb138f905df763bbcdd82c4498015c446a01e920f53ae4df8bf3b64
-
alt-php56-enchant-5.6.40-133.el10.x86_64.rpm
sha:37294008a8396ee842bd83a6727ded9296c9795db1276c2ef5a9b5ecde0114c5
-
alt-php56-firebird-5.6.40-133.el10.x86_64.rpm
sha:3370198bc94bf6d8a9ae3cff8cf7b0cb8236d5e5541885a4a7fa934ca9f99877
-
alt-php56-gd-5.6.40-133.el10.x86_64.rpm
sha:bc6501f3442f19c8a284129a51efbaae8b7e3f8b8742a5cd05c8496ab6884b1d
-
alt-php56-imap-5.6.40-133.el10.x86_64.rpm
sha:22f47ed6acad1f53b352bc4193dbd2660cff11dad392cd293d9469293968db34
-
alt-php56-intl-5.6.40-133.el10.x86_64.rpm
sha:cd9259db75e7d220ddffef4ccc14ea77596d877fc27bb7bd653a07dee63b22ab
-
alt-php56-ldap-5.6.40-133.el10.x86_64.rpm
sha:5d19318914db91a12a5bb471e49cf0049487088d90f67098ef5aa4ac44465368
-
alt-php56-mbstring-5.6.40-133.el10.x86_64.rpm
sha:3211bbbbfb3163a10cb01470366358b4ab82faec42c2bc9e4a3783aefb9ca228
-
alt-php56-mcrypt-5.6.40-133.el10.x86_64.rpm
sha:d644725629b912a15abfb1a0c2b03fde80ca1af1c159c7cabdfc3f85b9c148f6
-
alt-php56-mssql-5.6.40-133.el10.x86_64.rpm
sha:88ece07ee84a96885f550016c06eddaf3da8b233d097d193e8fac15e52e1430e
-
alt-php56-mysqlnd-5.6.40-133.el10.x86_64.rpm
sha:7c71a53908446017fb252a927eb985958e949cc2b9a15748a3fe9c9c2f5a4bbf
-
alt-php56-odbc-5.6.40-133.el10.x86_64.rpm
sha:25d6fb13f1ce18d69b354a46cc484d3e1eb74ae426cf809e93a3263e3995b7e7
-
alt-php56-opcache-5.6.40-133.el10.x86_64.rpm
sha:8580bf1459b4c8e12439b175ecc7c834c5b87f99a501d383cc17bcaadc485713
-
alt-php56-pdo-5.6.40-133.el10.x86_64.rpm
sha:8c16e057709ee0ea1e552c0bccbc8bc74d146d41256823f518fadd5483a0ee83
-
alt-php56-pgsql-5.6.40-133.el10.x86_64.rpm
sha:4f2138b301223826aa38f1a201979d29d55b4ae6d55f457f6f71380f142d2075
-
alt-php56-php-fpm-5.6.40-133.el10.x86_64.rpm
sha:ab419dd9082f1d838b2d8f8fb709b993a67bb5968c2701594149c71e5f08535a
-
alt-php56-process-5.6.40-133.el10.x86_64.rpm
sha:f1abe4acc37d5ee4489fdb68ff84498ede9e1f20ecdb0e236b26564a847a1297
-
alt-php56-pspell-5.6.40-133.el10.x86_64.rpm
sha:f8b19e3e37786ea4e1035fa0a007e8f168e36efb011dc9387f32aa38e11338ca
-
alt-php56-recode-5.6.40-133.el10.x86_64.rpm
sha:0d0a0f35f25adae3672449a0cbab163b0a31f2e038fd7e2eedbea5ff2a67a27c
-
alt-php56-snmp-5.6.40-133.el10.x86_64.rpm
sha:8c2902cbbd00842bd3e5727462c6427542043d928c30f56e1954f5743c816f03
-
alt-php56-soap-5.6.40-133.el10.x86_64.rpm
sha:a305f9a6ac3ce54eb72b5f8e56032dd788eb2e2db973ab15f23afbae3c099d0c
-
alt-php56-sybase-5.6.40-133.el10.x86_64.rpm
sha:889f10d70682141a1c1abaabba7aed0c86a0dcb1017f2645211829b40b51d0ea
-
alt-php56-tidy-5.6.40-133.el10.x86_64.rpm
sha:9e4e9e5d3c4b980b77c25f450b8d23d43112811c00e75d3f919d92a71ee46bf8
-
alt-php56-xml-5.6.40-133.el10.x86_64.rpm
sha:9d8b244e57bffdaae0a1304d2f9705627bb8208dc49bcc3e19e01c4831d8b578
-
alt-php56-xmlrpc-5.6.40-133.el10.x86_64.rpm
sha:097172bf148dec7988757644433736a2d55fe87c9caba907bc074fbf4be9c470
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
