[CLSA-2026:1784558037] alt-php74: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 14:34:26 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74-7.4.33-64.el7.x86_64.rpm
    sha:f1d39b5bfefa72f7b94b0c86df122130d866fc16624019b3d0e1cfda1292f51e
  • alt-php74-bcmath-7.4.33-64.el7.x86_64.rpm
    sha:95dc6d02a2dbc92c558289b8c3e05e33e93e6934970f18770a9d7832ce8575cd
  • alt-php74-cli-7.4.33-64.el7.x86_64.rpm
    sha:977da6942dd4f2494fc9efcfd89216a680387c72247853e4e5c8c8bc48e4606d
  • alt-php74-common-7.4.33-64.el7.x86_64.rpm
    sha:cce7794a3a0c45b6c1d2c6975469b7ad99cd88bcf05fb27609bfe3e03587e5ff
  • alt-php74-dba-7.4.33-64.el7.x86_64.rpm
    sha:6c44c0378e38becce5fadedbd85ba52b66edf8287186bde247a478e0367e7bea
  • alt-php74-devel-7.4.33-64.el7.x86_64.rpm
    sha:828a7163535f104638335bb78ca91aaff8a69e6e0ca0cc04e9ceea58c1ef7bfd
  • alt-php74-enchant-7.4.33-64.el7.x86_64.rpm
    sha:a3b96f135ba36eb013d00e1321675f4ad76d2e14aa91279feb990fbdd03a4e69
  • alt-php74-firebird-7.4.33-64.el7.x86_64.rpm
    sha:5d4f8a54bf393c6fe17a5317f6221b24ff6372db24fb7931f052e8ba89418c1c
  • alt-php74-gd-7.4.33-64.el7.x86_64.rpm
    sha:2d1a447c51db90031a84ecc49996eabdf79adaaab4bc002dca7144f65271cb4a
  • alt-php74-imap-7.4.33-64.el7.x86_64.rpm
    sha:12bc947f353ad6544c6f58524a0ad8be62084d27b9e4d1fa778dab68a7c25136
  • alt-php74-intl-7.4.33-64.el7.x86_64.rpm
    sha:7051a370606d632a1f69434efeb203e7ce65e72e39e53299dfdd674d562d138e
  • alt-php74-ldap-7.4.33-64.el7.x86_64.rpm
    sha:f7830748b7aa8be89da92330d184ebeb78dabc1387a3280a8f1144410ad6ede3
  • alt-php74-mbstring-7.4.33-64.el7.x86_64.rpm
    sha:6ec642bfae5c8a561676975734c3214f0c4d09e43c2ca2a211349a17d4eb8ac2
  • alt-php74-mysqlnd-7.4.33-64.el7.x86_64.rpm
    sha:8fca738cf515d1b783a571ad2f17a98f9a133530524778ee1a87696f1d37cc03
  • alt-php74-odbc-7.4.33-64.el7.x86_64.rpm
    sha:ce55d219f7bc670997831fe000c8d5bc269102635738f3141b8a42cb8b3780d2
  • alt-php74-opcache-7.4.33-64.el7.x86_64.rpm
    sha:bf39129256cadb539f08b3c747e40aa6d5b00856a59df9015147369d6d59b99a
  • alt-php74-pdo-7.4.33-64.el7.x86_64.rpm
    sha:064b90fbefa5ea21a4fb067f5323ae3faff1184b42f5b3700cc9dae2abe52d8f
  • alt-php74-pgsql-7.4.33-64.el7.x86_64.rpm
    sha:1e1eee6cd4de321f9f9ad6674d17939dc4e3190521766228191a47b2f45748e1
  • alt-php74-php-fpm-7.4.33-64.el7.x86_64.rpm
    sha:7be608f57e89bf411c4b5e763c0fc022438b6e43edaeec75bad18273acbef91a
  • alt-php74-process-7.4.33-64.el7.x86_64.rpm
    sha:2092f77645ed8c3dbd7739cbee54b9aef34a99c67e023efd9c0d79e80a529232
  • alt-php74-pspell-7.4.33-64.el7.x86_64.rpm
    sha:9090c9bcb7344d37ebe34b18bcd3c91da9dbbf1b0a3b734bd0719636506a7358
  • alt-php74-snmp-7.4.33-64.el7.x86_64.rpm
    sha:b7cb384454e3a9848643994df22a56231a91c8875ab9f99735837d7903235d4a
  • alt-php74-soap-7.4.33-64.el7.x86_64.rpm
    sha:d154cd1305a119b9bf8aa56bb1145eb36da9adfa3a71ed18b7bc289c9c8d1819
  • alt-php74-sodium-7.4.33-64.el7.x86_64.rpm
    sha:1f6e92b94bb98a919214d5170a64b1b53c8e56f3965a0d8caa91d0c81fb07540
  • alt-php74-tidy-7.4.33-64.el7.x86_64.rpm
    sha:3eea6e3e5ef6da63e566e95c29235165d5179263249afffedbb031f0cc7c8a74
  • alt-php74-xml-7.4.33-64.el7.x86_64.rpm
    sha:2ef47a3345b311406ed9e3c35806e4b826dd03455ec49320dcf98b78315a24a0
  • alt-php74-xmlrpc-7.4.33-64.el7.x86_64.rpm
    sha:bc769449e743265d32170506069097667acda191cbdb3dec3b23755169fc2b07
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.