[CLSA-2026:1784563767] alt-php74: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 16:09:56 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74-7.4.33-64.el6.x86_64.rpm
    sha:6ce046bf0dd8ba707d502ba39127c3766a4ceab954c3d9972639302f483d3ad1
  • alt-php74-bcmath-7.4.33-64.el6.x86_64.rpm
    sha:6f3d12005f9c2c40738f52090d4d8a8d923f3c08e286d6e38a7110a796c1c5e9
  • alt-php74-cli-7.4.33-64.el6.x86_64.rpm
    sha:5c54f37ec0f9c861ac363b51fd54faa59a4791296445c21cec4e63fcb7b53c45
  • alt-php74-common-7.4.33-64.el6.x86_64.rpm
    sha:2f192499841984c913d0794d538bd02ddaad39f57e0de8c297516c43ded54eb9
  • alt-php74-dba-7.4.33-64.el6.x86_64.rpm
    sha:c7ffa56798a239efd0ddf95f89dc49f054b04cf521f24ac4a79c9624db57196c
  • alt-php74-devel-7.4.33-64.el6.x86_64.rpm
    sha:787ec66a25033b0ec1de732f6cbb50d15b9eaad6e9185b25c07fd8d407643786
  • alt-php74-enchant-7.4.33-64.el6.x86_64.rpm
    sha:76eb1ff72544e151ed69535df97297463e4b3d98531ad836340c378a5ec37820
  • alt-php74-firebird-7.4.33-64.el6.x86_64.rpm
    sha:b2ba917abba7f1458816e8cb3d8d0562dd5d16bc431c04d747b7f2b664dbe40c
  • alt-php74-gd-7.4.33-64.el6.x86_64.rpm
    sha:84818818d9df6fa3163046a75a299f81cad65b8361848a6ab2859580f19dc19f
  • alt-php74-imap-7.4.33-64.el6.x86_64.rpm
    sha:2171f9a2816f6fa237a2add13e466d294a805a79256132935aa7de04fe8fdbfa
  • alt-php74-intl-7.4.33-64.el6.x86_64.rpm
    sha:48e314fa8519e5e31bc769198d37b691aaceab5f81d834f8e3fece5c43be3c17
  • alt-php74-ldap-7.4.33-64.el6.x86_64.rpm
    sha:3f2b5b3de6f9dcbed05ed623a47c252ea4422f9a6a853554230e1f15e4b13754
  • alt-php74-mbstring-7.4.33-64.el6.x86_64.rpm
    sha:5a5257437dd379ac94f0e9616965d47be24df9d0bf8a9f549644e0772d39998a
  • alt-php74-mysqlnd-7.4.33-64.el6.x86_64.rpm
    sha:a5533f0ada86eb555ca74320a90b8db6f1aa337bb971d304c607e0ac08b54fe5
  • alt-php74-odbc-7.4.33-64.el6.x86_64.rpm
    sha:1ace1868807050b8b6c28b22a8e7ff092f7d824106c7ee2c5c10740b398120ad
  • alt-php74-opcache-7.4.33-64.el6.x86_64.rpm
    sha:4b4ce9eeea452c5b03b6f7900065f1941a46c9c9885f5728b79f1f7480f5ef61
  • alt-php74-pdo-7.4.33-64.el6.x86_64.rpm
    sha:80668137643fc50fb3f81ea89509cd413dbd0f3b4dd6c410f4b606cd73301aa9
  • alt-php74-pgsql-7.4.33-64.el6.x86_64.rpm
    sha:6a2ffeffedd0892b6cdddb9e74927edeb3620f707937d96e8c29dbb1bf56e1d0
  • alt-php74-php-fpm-7.4.33-64.el6.x86_64.rpm
    sha:37fc330dba0e962e0b804b7355183938e22953ef2f580d5546c54ba4ae6eb750
  • alt-php74-process-7.4.33-64.el6.x86_64.rpm
    sha:04fe4f8392fcac5b64312e828863bd7860a8436c78cce886ca4890533e4aaa8a
  • alt-php74-pspell-7.4.33-64.el6.x86_64.rpm
    sha:7bd47071574230ec01febd838a144d2e5f9a0f1f6e354212719ec901336df386
  • alt-php74-snmp-7.4.33-64.el6.x86_64.rpm
    sha:b888d394bd5a19ae78b9d44ba2c2ce7f713e07f8f0ab97b7595f5246ef723593
  • alt-php74-soap-7.4.33-64.el6.x86_64.rpm
    sha:ba73b0d85089f82132f39b5b6df89588571b42dc5564dd97e806bd9923e433a3
  • alt-php74-sodium-7.4.33-64.el6.x86_64.rpm
    sha:7c553aca23f51f1f7067c05137e89086ccc7a52e121ec8b5b31a2ee3bc5faa8f
  • alt-php74-tidy-7.4.33-64.el6.x86_64.rpm
    sha:cc95ca626827b3a5a430e08b033350f95e7478f29b29cbdc53a2986474f280df
  • alt-php74-xml-7.4.33-64.el6.x86_64.rpm
    sha:ebc9753d3982b381e49e8fcd23b4f7f926a57b006c674923705666fe0e154987
  • alt-php74-xmlrpc-7.4.33-64.el6.x86_64.rpm
    sha:15263abb57f48f20f6c3fa2d3f0b98760fdbfdf1632743e6738a45df11ac4842
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.