Release date:
2026-07-20 13:56:19 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding
(aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one cipher
block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and
overflows the heap when built against OpenSSL 3.x. Backport of upstream commit
cbc0489126 (GH-22187): reserve one extra block for EVP_CIPH_WRAP_MODE ciphers.
(5.6 has no php_openssl_cipher_update() helper; the fix is applied to the inline
allocations in both openssl_encrypt() and openssl_decrypt())
Updated packages:
-
alt-php56-5.6.40-133.el9.x86_64.rpm
sha:ed4c78a23394b22a34aea5af69ca6acabf843d3d8930471f29264fb0a13f4006
-
alt-php56-bcmath-5.6.40-133.el9.x86_64.rpm
sha:80500401468cca4847dac896c81cf5636fa43172e0457b2b4e93dec9812a4090
-
alt-php56-cli-5.6.40-133.el9.x86_64.rpm
sha:df7fab0a28ea529b4dfa59e6a1f6ef98f3b1d7668656d660111a848aecc5488e
-
alt-php56-common-5.6.40-133.el9.x86_64.rpm
sha:d51c1819c67d83600f1989a3416cc7c721736eb4114f470808af9ad79310134a
-
alt-php56-dba-5.6.40-133.el9.x86_64.rpm
sha:83070bac4ceae99261660171586a33aa926639f270844fbfe42ccc1e53c81e75
-
alt-php56-dbx-5.6.40-133.el9.x86_64.rpm
sha:cc6b0b3ebc102cb4c2e0cee17515f3838b7eb62b25bbc6ba07fe55c2835d1bea
-
alt-php56-devel-5.6.40-133.el9.x86_64.rpm
sha:0bd9be1a19a145dccefaf44bdbcf22b8a0430188d3be818fb321bbdce30300f1
-
alt-php56-enchant-5.6.40-133.el9.x86_64.rpm
sha:18174522c4e1a849c0fc611ef752fcfe394176ac19705bb210a741e789a051f1
-
alt-php56-firebird-5.6.40-133.el9.x86_64.rpm
sha:e85bba8cf446570028984b5497a9d9cfda44822d800d4d5c8b5d29f98d691163
-
alt-php56-gd-5.6.40-133.el9.x86_64.rpm
sha:4a62cccf9c29617a0e7264c1eac8ab99feaa8fb86dc87380d9822c60b389e702
-
alt-php56-imap-5.6.40-133.el9.x86_64.rpm
sha:96ffa593844887625b8480b97b287c2e0115a9099b1f3cc45a06599713bcd562
-
alt-php56-intl-5.6.40-133.el9.x86_64.rpm
sha:3b7079bc931d47522de352f33f644400149c2dbd30bcfcd8fba07675952a6e2e
-
alt-php56-ldap-5.6.40-133.el9.x86_64.rpm
sha:d045425cbf9bdf1f5bd3df28b22fb2c1b9aa12804a2b9c68f34b478c16fcd5e5
-
alt-php56-mbstring-5.6.40-133.el9.x86_64.rpm
sha:db4006f2d661922fa5eec697c9fd4b3b62ce6c55a6ea66c3e8f6310c21ae873d
-
alt-php56-mcrypt-5.6.40-133.el9.x86_64.rpm
sha:26fb10a442047755d4336fa40a18fe44ec81d208310ce06020741766ab734571
-
alt-php56-mssql-5.6.40-133.el9.x86_64.rpm
sha:05f5f39332238fe7019690dcac507f81a5a48fa714aa68b0751c8246e5c40674
-
alt-php56-mysqlnd-5.6.40-133.el9.x86_64.rpm
sha:b6a38c52458261c8ea5ef089a14c092fbc1c5f8d4bd4a3e5214ed7ca156bb94f
-
alt-php56-odbc-5.6.40-133.el9.x86_64.rpm
sha:8b87ac298545e6ff3ddadbc6ef45ee117bcbf12917e060ecbe7b1fa67a9d3e3e
-
alt-php56-opcache-5.6.40-133.el9.x86_64.rpm
sha:b44e494a4ac892025a9ccd5624cca67ce609e56590d211dc6dee02c61da29ce7
-
alt-php56-pdo-5.6.40-133.el9.x86_64.rpm
sha:3d7a1314aa0eccd250ee6be55b00a7e8bf56f41af37679749e454eb0c33fe02e
-
alt-php56-pgsql-5.6.40-133.el9.x86_64.rpm
sha:adf553c8eb14d3775f22a56b8c2de49466950521df08e2389b0c3322510c1457
-
alt-php56-php-fpm-5.6.40-133.el9.x86_64.rpm
sha:05190714b1b4f3e9ba0294b7434dd5ec5b7eb8db0393d374cec947b3136bb458
-
alt-php56-process-5.6.40-133.el9.x86_64.rpm
sha:7e7183386097e6b926543ab59dd5a813dda5ec8337cdcd75edaa29497d6b9cf5
-
alt-php56-pspell-5.6.40-133.el9.x86_64.rpm
sha:3e002217de59094d7099ededd33682da46deb066e0dffb8613de2aea200eb03b
-
alt-php56-recode-5.6.40-133.el9.x86_64.rpm
sha:dc8464957e77e65ffaacb116df900a5e922a2d65e7d979ba634ed1aa34469115
-
alt-php56-snmp-5.6.40-133.el9.x86_64.rpm
sha:58c0af76b227315d3d08923da4adea690566c74a2745f6c3c0aa00909bb91537
-
alt-php56-soap-5.6.40-133.el9.x86_64.rpm
sha:2f4610a2d775e062521bae4a050c178d4555dadc684ca4b42ca2ab2aedb1667c
-
alt-php56-sybase-5.6.40-133.el9.x86_64.rpm
sha:cdc5401a72a2ef75b3ce3ef41f66c83122eaa0757a80f5a7ed4fff252c993bb7
-
alt-php56-tidy-5.6.40-133.el9.x86_64.rpm
sha:e5a79933e4b5b354689c8bd0bbafd19762f4f08170660d7d5e470f7edabbd884
-
alt-php56-xml-5.6.40-133.el9.x86_64.rpm
sha:399ddeedd9fff9b7a22d1907a68535e193f59ed9ec54af269e1b05d53080d77b
-
alt-php56-xmlrpc-5.6.40-133.el9.x86_64.rpm
sha:6f6aff52f96c999a95b485731e220643a794ca83e3e2df9f8820e551c528a72c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
