[CLSA-2026:1784555192] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 13:46:57 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:f711ef041777a2fe6b9e88ca91a758181dd48015
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:74a60e461aef88bc4f2d3521cf18fd074ca28b51
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:9153ce48e92ab52f395caafb4d87d4238217744b
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:3d6bbde392e955226a0429736fd84444dc15a669
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:e67bfa740c14d24e3854f030e6f40a976d87b8d7
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:0c8cd1e57f8fcac9d2fff095348a6e8012afc9eb
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:45d207b29d1e3a5f8c87f5a12b02da9386705960
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:cd7912d7e534f5bbd2ed3a41787d1f526abc9b0d
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:68988036d319acbd5e2d3fe8e94a471efb26c169
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:1ec20adb5d8275c4071e4b37acaa58186f6346ed
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:f1fe62f73fff4f3d7acdccb9c14ec44d94d7defe
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:262c31a15f5a9c52ae34323713e09713a376c824
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:8f2ff1127728f95efb438f5b4926c9dd570387bb
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:f02d42556ad51cb806b3d941e32bf7a0abbb32ba
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:8cfc78e54c9713687cbb9f0948ed597f4152d001
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:dfce6a53b8f71db58de36d6f971be06edfdb3ab8
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:39fb8efabc6f16b063b2600d3ed2f5194d08436b
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:b068b85dcb78c34e0ec3366d5f5b2869055e2d7f
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:9184b2811a813c26e8b26865d7958585303ce40c
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:6bccaf74111cc70c005b4d606768642df2add525
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:bfc16d07905e07fc1dfb344ad137bbc82d1b83ea
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:d74acd1aa355710035a13941ae0b15f190baf110
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:23aa1d7c5d0b19c3f3b7bcd6a9b81ca7f7e79fe1
  • alt-php74-sodium_7.4.33-64_amd64.deb
    sha:c1cb26911023a6d1cf3f1be4e7ec93abfc38d28e
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:6140b9ebda9bced5affc671fde0379b9d1cfebcb
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:d3ec4a925ca401ef7e1a77e32b603c511814daa4
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:e4d853524df4804a74fab4084fe6789843f0d473
  • alt-php74_7.4.33-64_arm64.deb
    sha:e532b976e338f863f9a0cb93deac4e63a700dc31
  • alt-php74-bcmath_7.4.33-64_arm64.deb
    sha:b896065687b1d9d54989e2c5c2a1c32ef87b9432
  • alt-php74-cli_7.4.33-64_arm64.deb
    sha:f96ad730722cf0bfc57d9519d49b655caa1c63e5
  • alt-php74-common_7.4.33-64_arm64.deb
    sha:4e19cb545bfd2c360adcda4ccdacdbce4f82ce08
  • alt-php74-dba_7.4.33-64_arm64.deb
    sha:cfe041388a5d1ca25c79ec2fd3bd0877a009cc15
  • alt-php74-dev_7.4.33-64_arm64.deb
    sha:7d3f8944023f2c1b7c055e86f5f6a28193bebf57
  • alt-php74-enchant_7.4.33-64_arm64.deb
    sha:9ebb733afa43d371b4dff7f2c3a1f2e5ae770cfb
  • alt-php74-firebird_7.4.33-64_arm64.deb
    sha:4249b430d4c451cf6d10709bd2fa171aa29a43b3
  • alt-php74-gd_7.4.33-64_arm64.deb
    sha:3546b8a711db579d0dba5255a40921cd29b72de2
  • alt-php74-imap_7.4.33-64_arm64.deb
    sha:c1bed5e5f632d26c9d336f9bf09f6ad8e3641c12
  • alt-php74-intl_7.4.33-64_arm64.deb
    sha:0da07ad976a2ed50af3e60f65fa0f30b5f6adf3d
  • alt-php74-ldap_7.4.33-64_arm64.deb
    sha:fa6ed7e9394b98064c71ad4aee6be48f3872e917
  • alt-php74-mbstring_7.4.33-64_arm64.deb
    sha:84c4221baa3b331f1859ab452a3fc526c00e915f
  • alt-php74-mysqlnd_7.4.33-64_arm64.deb
    sha:e2e01f598f86e9ffc048d2f86983d74de86bd65c
  • alt-php74-odbc_7.4.33-64_arm64.deb
    sha:9b47b93724afc99e9c47d2790e85a60fe2816416
  • alt-php74-opcache_7.4.33-64_arm64.deb
    sha:a511e643c1c0d4f90290fb66e9f71054d3009630
  • alt-php74-pdo_7.4.33-64_arm64.deb
    sha:1492ad32fc91cf46262f058b45cb97b205b0fbdb
  • alt-php74-pgsql_7.4.33-64_arm64.deb
    sha:88df9abb8acf9be7d0748e08690e31e6f8bf9eaa
  • alt-php74-php-fpm_7.4.33-64_arm64.deb
    sha:917400405ae84afe28c18c9f72da5dd5e40bdf65
  • alt-php74-process_7.4.33-64_arm64.deb
    sha:9f5dea5941ee75f41e915f92748a16b884b3556e
  • alt-php74-pspell_7.4.33-64_arm64.deb
    sha:5443e1264a2ac02192087a1e2d03b81675402c4c
  • alt-php74-snmp_7.4.33-64_arm64.deb
    sha:fb92c38bb813e6f1639f5efa1d76dcfd3a9e0688
  • alt-php74-soap_7.4.33-64_arm64.deb
    sha:090f56dd70cfea930dab2f7b202d0f289eafe62a
  • alt-php74-sodium_7.4.33-64_arm64.deb
    sha:85461e96082887dc34338c02c715721b57ca8bf0
  • alt-php74-tidy_7.4.33-64_arm64.deb
    sha:a168bf4c773e3bb2a763dccd63c10cf9fc3ac3bd
  • alt-php74-xml_7.4.33-64_arm64.deb
    sha:77c92678889f88d454320773a0379db4bcf130f3
  • alt-php74-xmlrpc_7.4.33-64_arm64.deb
    sha:988e8cd921eacc0dcbee839e666a42fa39de0548
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.