[CLSA-2026:1784550443] alt-php74: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 12:27:49 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74-7.4.33-64.el9.x86_64.rpm
    sha:68236b08b93cb6d5059a31e811bf93c1e7d781957f1dd0da6a10c10b4969038f
  • alt-php74-bcmath-7.4.33-64.el9.x86_64.rpm
    sha:21dbef301c74f2b335a343aab31a8d7ef17881a6c5ac8d59ae68f35e03145df8
  • alt-php74-cli-7.4.33-64.el9.x86_64.rpm
    sha:6b84f3611a9f0f97dd0f4ea208b06e03e0b79c80a07d24352987ef97f1a02310
  • alt-php74-common-7.4.33-64.el9.x86_64.rpm
    sha:4e1207494d5deb004a020e37a7f6407c1bf2be1acbb23b55a2d0281841e421e5
  • alt-php74-dba-7.4.33-64.el9.x86_64.rpm
    sha:9cdc07db658fc782c272f7069cc1fc3c507e9d73e0d4f8323658940c6fe6188d
  • alt-php74-devel-7.4.33-64.el9.x86_64.rpm
    sha:5dcdc9aaf0ecc644fd3c55a7ddaa1b8069f4d7afca2ad3b42f46365e2ced1e3c
  • alt-php74-enchant-7.4.33-64.el9.x86_64.rpm
    sha:5e70cbfcbaa3a02d67787788f985ebffcc5cb58be64f28b0786fdbb1b81d882a
  • alt-php74-firebird-7.4.33-64.el9.x86_64.rpm
    sha:eaa2b71946d24da4ad154bfbdac8a2f1bf18729b95f64ed05fba563c3e76a661
  • alt-php74-gd-7.4.33-64.el9.x86_64.rpm
    sha:6f5b021e6cb9f4a3cfdced619972c88c43ae30f5aba765392224d6daaf8bdf70
  • alt-php74-imap-7.4.33-64.el9.x86_64.rpm
    sha:7c9cd78df1cf8316a9e1fd2fe659a0ff3a032041e9dc0e712fab428a493b2049
  • alt-php74-intl-7.4.33-64.el9.x86_64.rpm
    sha:4e83cbcf3e91bc1e203c8bb12906095e557aacd68e3ac4f33a5b9c14760900e6
  • alt-php74-ldap-7.4.33-64.el9.x86_64.rpm
    sha:346fb0c6cc2aa1ab670aa589daaca4acb4170817a5ff0c4bd73832d9632f9eb9
  • alt-php74-mbstring-7.4.33-64.el9.x86_64.rpm
    sha:0fbda4e44f21577f94e010daa3349cf6a7479aa00868e8d9a5c066f4e28dce19
  • alt-php74-mysqlnd-7.4.33-64.el9.x86_64.rpm
    sha:4405404abafec9843162f6e620537eeaa1c4a4d4a7787d2177224743f440a58a
  • alt-php74-odbc-7.4.33-64.el9.x86_64.rpm
    sha:6ce7aaae72858967121ba95931b8cc2dd6b3d8286fcf9229cc5fd68230cf2b97
  • alt-php74-opcache-7.4.33-64.el9.x86_64.rpm
    sha:4dc7717f8c8f07af51ef8f5992725e77d2662baf2df85a47a60d44b6976c8690
  • alt-php74-pdo-7.4.33-64.el9.x86_64.rpm
    sha:6e1259d52d1dcede92ee1d5b53fd25d8b1b084674506b8297f20e200c47b5fa0
  • alt-php74-pgsql-7.4.33-64.el9.x86_64.rpm
    sha:4a7c279b584c1fa774ceb4277c624ccebad0ed0813383e3d68f38da627972991
  • alt-php74-php-fpm-7.4.33-64.el9.x86_64.rpm
    sha:d0050deb9293011a76c735d9690ae5680006e7bdaa8836deae43400193870e75
  • alt-php74-process-7.4.33-64.el9.x86_64.rpm
    sha:81a7241b65e1c4c185f21c812774970f2f97ed5147bac7cee5c9dc0a108944e1
  • alt-php74-pspell-7.4.33-64.el9.x86_64.rpm
    sha:1794f714305f23d397910b29dbdbbd66b7b9ceb3ba82f677075279671cb880af
  • alt-php74-snmp-7.4.33-64.el9.x86_64.rpm
    sha:be1cb6aa8afb14dc0a4d188b5a8a9d84830c5354c3ad2b36fec9ab8820204268
  • alt-php74-soap-7.4.33-64.el9.x86_64.rpm
    sha:05c9e6b0b9a4efcedd3b3cf62938e5045f6bf3365c8e523885529f1a6c24c6bc
  • alt-php74-sodium-7.4.33-64.el9.x86_64.rpm
    sha:4bb9026362ba6136140050231f0ac5e7dd3be471c38ebb5b326d4a13d5710699
  • alt-php74-tidy-7.4.33-64.el9.x86_64.rpm
    sha:911da253d7cc33f5c1f68a7dbf29906c2144a7401370d25507902ae3044f689e
  • alt-php74-xml-7.4.33-64.el9.x86_64.rpm
    sha:00796662747ffb30bd1fb24282602b3caff8727bc110e7cc5c442b33e7cbdc7e
  • alt-php74-xmlrpc-7.4.33-64.el9.x86_64.rpm
    sha:5be14b93badcd3ae29420880d535404f0a53189001eda4cca945b1439d3ded34
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.