[CLSA-2026:1784553401] alt-php74: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 13:17:08 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74-7.4.33-64.el8.x86_64.rpm
    sha:f58a12ed68355b83a3887bdb198eba9a98b4cf6a04e78e30aa59b5ecc17d7380
  • alt-php74-bcmath-7.4.33-64.el8.x86_64.rpm
    sha:d6700c13bb89d44aa6a08b56086667026620f5a55539ac3d50f208dbfe24b13b
  • alt-php74-cli-7.4.33-64.el8.x86_64.rpm
    sha:c0b65f4c285e4edd4d62babf43b44b5ec92996342d2923f262229d0e1e18c9b2
  • alt-php74-common-7.4.33-64.el8.x86_64.rpm
    sha:576412e1df345d7214edc95deab5a833f169059760247020e3bf93688fab1d9b
  • alt-php74-dba-7.4.33-64.el8.x86_64.rpm
    sha:b3a3f8b8a2a6caea757f6786adff65872cc8bb2eed8115d5c4fa6fea470e1f3d
  • alt-php74-devel-7.4.33-64.el8.x86_64.rpm
    sha:69661e6ca214022e994d5fc418885230ac98b2e5a1ae56362569a0462c11c5fa
  • alt-php74-enchant-7.4.33-64.el8.x86_64.rpm
    sha:83a6d7c41dee0302e90721385c2e29cd2e5cbcda79e2cbcb1e631f800615308c
  • alt-php74-firebird-7.4.33-64.el8.x86_64.rpm
    sha:b661ff6bb1ee814ee0edb88c74e194c6afdaa5c8bc52c6558fe4773f24a00e49
  • alt-php74-gd-7.4.33-64.el8.x86_64.rpm
    sha:a5eeacb0f65b6f3e3cc97a9b29d84c2b7b5574639cdf19ff3388d283af0a4ec8
  • alt-php74-imap-7.4.33-64.el8.x86_64.rpm
    sha:7398e44d9c05b2288cb68ad83052b4e2a92720c25a21ff5656fb4732d8f78f68
  • alt-php74-intl-7.4.33-64.el8.x86_64.rpm
    sha:4e8b6d4b4b1fe52dbe6e855257deee7c6e15fdeba193d6000cb1df1b4dc71e79
  • alt-php74-ldap-7.4.33-64.el8.x86_64.rpm
    sha:7e6237edf181b705427fe70fc2d8c71d0fbe6ffa3cf0bfc9e6c8faeb1c36c558
  • alt-php74-mbstring-7.4.33-64.el8.x86_64.rpm
    sha:64951eb511c436c7651019b00582ec502c715aaa4f7c567437e8dd94cd8cb158
  • alt-php74-mysqlnd-7.4.33-64.el8.x86_64.rpm
    sha:8c7096e0aa8c10217a95fea5a2840bf6bd694599b98c7c26140da16fa7d3dbcc
  • alt-php74-odbc-7.4.33-64.el8.x86_64.rpm
    sha:e1ab7923cd7cebb9274dc676fe885b5101245c18acec1523503ba5c490a5b6f8
  • alt-php74-opcache-7.4.33-64.el8.x86_64.rpm
    sha:31731b034f9cf8f60d9190c0847c07637764dd009348f2da3f97e6a0ffd62d10
  • alt-php74-pdo-7.4.33-64.el8.x86_64.rpm
    sha:b16fe5198b6b9f2f71e6fcadc43a11599a537d98a966c711d0be7a0d19c3fb51
  • alt-php74-pgsql-7.4.33-64.el8.x86_64.rpm
    sha:6c350b891a7b7b1d03adf69fa67e11af0603729eeb6ca3394c2e58f79e51a02f
  • alt-php74-php-fpm-7.4.33-64.el8.x86_64.rpm
    sha:983e445c51a60920683e96c303b41464c900450f8fefd5346c0caf7e4b63fc35
  • alt-php74-process-7.4.33-64.el8.x86_64.rpm
    sha:7679eeeba99667cb47313f89a3d77d0d850c444253a17dfdb871349e29032515
  • alt-php74-pspell-7.4.33-64.el8.x86_64.rpm
    sha:07ff0e9df9915e3f74a5f173f46b505a5cce1e3eda24c429d76dfdf801a72c11
  • alt-php74-snmp-7.4.33-64.el8.x86_64.rpm
    sha:def0794f69a07b10fdba62dc9247bb7e1eccb5e47d0be09b6dcdc2ea49f272a9
  • alt-php74-soap-7.4.33-64.el8.x86_64.rpm
    sha:7a6139f753c721188c8c695baa58b70a1a569d8c8a517530d1fe76449da60336
  • alt-php74-sodium-7.4.33-64.el8.x86_64.rpm
    sha:3dcfea8bbcffd0ead864a6f1f83313b347c75579750235aae809d671eb7d7afd
  • alt-php74-tidy-7.4.33-64.el8.x86_64.rpm
    sha:1eb03e64389850c72449acd7e9da1845b567ade8b91c37754d2ee68202c03615
  • alt-php74-xml-7.4.33-64.el8.x86_64.rpm
    sha:2789f73c2df55501b5a63009481b38fe5724eee04c667ff028353a29e4f2e612
  • alt-php74-xmlrpc-7.4.33-64.el8.x86_64.rpm
    sha:9a95daf83a8f648f4272946dc4e829e4d77e91fe8bb7458eb24d335c844f199f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.