Release date:
2026-07-20 17:17:03 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding
(aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one cipher
block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and
overflows the heap when built against OpenSSL 3.x. Backport of upstream commit
cbc0489126 (GH-22187): reserve one extra block for EVP_CIPH_WRAP_MODE ciphers.
(5.6 has no php_openssl_cipher_update() helper; the fix is applied to the inline
allocations in both openssl_encrypt() and openssl_decrypt())
Updated packages:
-
alt-php56-5.6.40-133.el7.x86_64.rpm
sha:3551facf375c203a7121a702a295974142cc84fb6bf408aa5d4745927338080f
-
alt-php56-bcmath-5.6.40-133.el7.x86_64.rpm
sha:6121f1fe4dac2f2ba0c1500232e4686388d91ca92ce4e60d6e85a96b17549ae5
-
alt-php56-cli-5.6.40-133.el7.x86_64.rpm
sha:b5fc8f31bc2517679545aee4bef2ef875d25a29ec19796f43549d5437484ae83
-
alt-php56-common-5.6.40-133.el7.x86_64.rpm
sha:bfa288f20caa5758a7846d07fac22f01593c77757d78c83bd01b272a285a7eb6
-
alt-php56-dba-5.6.40-133.el7.x86_64.rpm
sha:fba6b857697117a63d0562c9d21afba25c3442d1191d6278fa606e8f235b23ab
-
alt-php56-dbx-5.6.40-133.el7.x86_64.rpm
sha:f9d72b8bba09cee271b431f0821f927eedef0a804a73661bf14919e242937830
-
alt-php56-devel-5.6.40-133.el7.x86_64.rpm
sha:fad5c35deebec238353017159c659e18b218ed394a15a9e0128314a91aecf093
-
alt-php56-enchant-5.6.40-133.el7.x86_64.rpm
sha:ccea9b55d2115fca162ec8c490c08e25469fee42a71b986ee0f8adc1323da34a
-
alt-php56-firebird-5.6.40-133.el7.x86_64.rpm
sha:6f29988f316891cf3eac6678f79255fb7e792a6cfdc29a26b48927c2114cae8d
-
alt-php56-gd-5.6.40-133.el7.x86_64.rpm
sha:01accb01eb05c2b4b5695d9f8e2ee5a671fb4e77d08d94a5ff27855c1b91bb1a
-
alt-php56-imap-5.6.40-133.el7.x86_64.rpm
sha:7f139a26a4170d3c1ea823f2021047aa91c547612b6b1a4f19a708ad25cc5f0a
-
alt-php56-intl-5.6.40-133.el7.x86_64.rpm
sha:ab4ed9e0ce8cb9131c43482b4269cf7dfed20bcc0ecb8325d74c281742337a7c
-
alt-php56-ldap-5.6.40-133.el7.x86_64.rpm
sha:3a246ff98a7a829af2399bd0ef67b8cd2ae5a82acb20a521341138fff0d75a3d
-
alt-php56-mbstring-5.6.40-133.el7.x86_64.rpm
sha:c47b41b85cb4bfdd29ee864496bea898165ce9f05b2eeb97348ca40419896eae
-
alt-php56-mcrypt-5.6.40-133.el7.x86_64.rpm
sha:5a4ef9557b9a24bb76934f5f9a6e59bde3a9387cf8baf70691e091b7179ebd7f
-
alt-php56-mssql-5.6.40-133.el7.x86_64.rpm
sha:9ac98bac51f034c6b052f33db9a142e29723f68252605706b4621dde5c5627ba
-
alt-php56-mysqlnd-5.6.40-133.el7.x86_64.rpm
sha:5da9288daf68278e6b899177e7badc3e671da3c0859f7f4be8d04bff68f79234
-
alt-php56-odbc-5.6.40-133.el7.x86_64.rpm
sha:334ccc6a5c23fe2bc4caa03d41ec81f48ecf478aa2759889b56cc998f19a5cd9
-
alt-php56-opcache-5.6.40-133.el7.x86_64.rpm
sha:aa381b10eebe290f12e79180d476167bd5ade0f5dbac3d61129888212fbac227
-
alt-php56-pdo-5.6.40-133.el7.x86_64.rpm
sha:880fbf2cc7833f73b746e21aa42215536bbe37d637fcf3cb7234b95aa83ad114
-
alt-php56-pgsql-5.6.40-133.el7.x86_64.rpm
sha:58ec862a1d65ae20aaff2fa731f9cf7f2785b696f636f86afbd1c7bb511837ee
-
alt-php56-php-fpm-5.6.40-133.el7.x86_64.rpm
sha:7f95e0d6bea9bcd8b1cb82803cb9d2472f61162e748cb26dccc4682984d0a70c
-
alt-php56-process-5.6.40-133.el7.x86_64.rpm
sha:c784e68ee1d14e9007061557e719b3589f2385dfaca16803e8261317bf17ad87
-
alt-php56-pspell-5.6.40-133.el7.x86_64.rpm
sha:094c0704574c2d340a256806e6361a8a6d0668c9f2c3a267c415c6cb717999e3
-
alt-php56-recode-5.6.40-133.el7.x86_64.rpm
sha:090c41a39a4ade6a6fc1b07c649147d6a254be03d3b6615fb3b2998a27b0442e
-
alt-php56-snmp-5.6.40-133.el7.x86_64.rpm
sha:c2a686621f60c4d4fe18c7833973b8c4cf4da960e544554949b0a967da77ecb4
-
alt-php56-soap-5.6.40-133.el7.x86_64.rpm
sha:0d916f972a52c7f6de6f40819f031a7e73ce7959890d0091cfeb5a7df189b6ed
-
alt-php56-sybase-5.6.40-133.el7.x86_64.rpm
sha:57f520d13b0c660239746066bf555c8eb09490ff5878d556b9a6c44c56fd24bf
-
alt-php56-tidy-5.6.40-133.el7.x86_64.rpm
sha:55fb3839da19f5723d61333eafb323aca4d93fd49b7c32ac229be9f27c662cde
-
alt-php56-xml-5.6.40-133.el7.x86_64.rpm
sha:2a09534985d27d09b067cedae883c42f9e6090f4def6aa7eedd1ce889404da4e
-
alt-php56-xmlrpc-5.6.40-133.el7.x86_64.rpm
sha:872f399c2eb2b88d179f50e7ce9e8e0843d8ec79b4f65ff368fc18eeb2a0fff6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
