[CLSA-2026:1784276708] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-17 08:25:32 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and corrupts the zend heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE.
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-84_amd64.deb
    sha:d535481c95969facde4d97bc1ea25cf62d7bd199
  • alt-php72-bcmath_7.2.34-84_amd64.deb
    sha:3bb52675c2afece5ae306bd6bd6c29d723c8b07e
  • alt-php72-cli_7.2.34-84_amd64.deb
    sha:adfbbb82c0237db89e0b927f7fa89df485075fa2
  • alt-php72-common_7.2.34-84_amd64.deb
    sha:a4bb2cb0691e031da5e91f5421e6290d0acf436e
  • alt-php72-dba_7.2.34-84_amd64.deb
    sha:575fedca08fcbeb8eb67a23c80c403a62dbdb3be
  • alt-php72-dev_7.2.34-84_amd64.deb
    sha:5358b4f4a73f65a2d103643805ef073868ffc95f
  • alt-php72-enchant_7.2.34-84_amd64.deb
    sha:c5cfbfbe3897a0575072bfb9e85d0451932cec2c
  • alt-php72-firebird_7.2.34-84_amd64.deb
    sha:f239a64488bc0f868888b21505e7eef0b0002a15
  • alt-php72-gd_7.2.34-84_amd64.deb
    sha:1e4f91552e71b100af8a015c412752ead04f0bef
  • alt-php72-imap_7.2.34-84_amd64.deb
    sha:f559f6ebe965334593c5aeaa32f8b6503e5be3fa
  • alt-php72-intl_7.2.34-84_amd64.deb
    sha:0ed7c24788a5983068d3831a84f7b5481b9f02f5
  • alt-php72-ldap_7.2.34-84_amd64.deb
    sha:56fd4685f2f0b17c7cb52c39e418a1ec6373ff85
  • alt-php72-mbstring_7.2.34-84_amd64.deb
    sha:b7bcc14ee59f467c8f53252b48b008f190ee1b8a
  • alt-php72-mysqlnd_7.2.34-84_amd64.deb
    sha:bc377272a0cf2906df0232110d184dc0e2056a2a
  • alt-php72-odbc_7.2.34-84_amd64.deb
    sha:e8f304b9e5cf2a330a4002fb2d4c0139d39c2e9c
  • alt-php72-opcache_7.2.34-84_amd64.deb
    sha:36f4d45811f311e4d36bad843ac83669fea5f448
  • alt-php72-pdo_7.2.34-84_amd64.deb
    sha:d2b236597e0fe8608624b0c6ab4dda1d13a3531e
  • alt-php72-pgsql_7.2.34-84_amd64.deb
    sha:8f80bb0050bb2cdba15872e056241e8af18b4f42
  • alt-php72-php-fpm_7.2.34-84_amd64.deb
    sha:fbfc65d5007a4e7a9be74f33c7c3c02745c52415
  • alt-php72-process_7.2.34-84_amd64.deb
    sha:cdde3a648cf31a4bf997c9167bcabf81e5019ac9
  • alt-php72-pspell_7.2.34-84_amd64.deb
    sha:5f12ea31fef491eafbb868acd7ad74e76c6db7fa
  • alt-php72-recode_7.2.34-84_amd64.deb
    sha:a6641de9f08834adccd2c13fb93a55f9311a9ee1
  • alt-php72-snmp_7.2.34-84_amd64.deb
    sha:8e9e786f4d58cb0d8a23a4638df9309c9cf19ba4
  • alt-php72-soap_7.2.34-84_amd64.deb
    sha:efb530d00d02aa3b6381f5bd47c38e2d57d3cf23
  • alt-php72-sodium_7.2.34-84_amd64.deb
    sha:0b01e2861143984241bc887e0dfc896e4150a721
  • alt-php72-tidy_7.2.34-84_amd64.deb
    sha:b1bcfca5b6d48293ffc971f727c7244d23761e20
  • alt-php72-xml_7.2.34-84_amd64.deb
    sha:fc1b49ebeb1d50d679a2fbe611cb12e4ce892a17
  • alt-php72-xmlrpc_7.2.34-84_amd64.deb
    sha:7d8751f656ab7157ab2c0d36748bf2aeb9b526dd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.