[CLSA-2026:1784560324] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 15:12:30 UTC
Description:
* SECURITY UPDATE: openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding (aes-*-wrap-pad) - debian/patches/php-5.4-CVE-2026-14355.patch: reserve an extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers when sizing the output buffer, so RFC 5649 padded key-wrap output no longer overflows the heap allocation in ext/openssl/openssl.c (openssl_encrypt). - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php54_5.4.45-186_amd64.deb
    sha:7454d2932850f7615b5e5612b5b6803f073de80a
  • alt-php54-bcmath_5.4.45-186_amd64.deb
    sha:3286d182695d7505276123924c84f01bf04e0100
  • alt-php54-cli_5.4.45-186_amd64.deb
    sha:a417c072067fc1e8cad01ea9fc16a73fe6eb059e
  • alt-php54-common_5.4.45-186_amd64.deb
    sha:a9d2ccc40c46ac874f8ba61358f16b5c6982c582
  • alt-php54-dba_5.4.45-186_amd64.deb
    sha:72befa17d15b0c5cc7123fd4e9af646683486ba6
  • alt-php54-dbx_5.4.45-186_amd64.deb
    sha:12c129f24aeb723cd8cf5a6bad87b10830656e8f
  • alt-php54-dev_5.4.45-186_amd64.deb
    sha:8aae43ad6160fc96c74915c04ce79103f3bd5d41
  • alt-php54-enchant_5.4.45-186_amd64.deb
    sha:56f0b49d176b08e552adff4812ae354fd8dc51ad
  • alt-php54-firebird_5.4.45-186_amd64.deb
    sha:c69358bfddbecf7a6fba9db254b151e6ea8fe85f
  • alt-php54-gd_5.4.45-186_amd64.deb
    sha:c0621990bb02d75e97c6fc1de8128d9522e5da83
  • alt-php54-imap_5.4.45-186_amd64.deb
    sha:54394343afa2786303ec2bf763919c9170b342c1
  • alt-php54-intl_5.4.45-186_amd64.deb
    sha:acba08532052c6e1ccb3f2b8c60a85b8b85c846f
  • alt-php54-ldap_5.4.45-186_amd64.deb
    sha:1f88902885f177b3876b5bdbc66a99081db6b96b
  • alt-php54-mbstring_5.4.45-186_amd64.deb
    sha:319df8e7ee19381886d98c39966db9130c324976
  • alt-php54-mcrypt_5.4.45-186_amd64.deb
    sha:b6294ace1adb3b6a0c3370c3dc16a7fc38bcf38a
  • alt-php54-mssql_5.4.45-186_amd64.deb
    sha:96a8ae24e3e0bd0fbaf8d164e626effc1bb3443d
  • alt-php54-mysqlnd_5.4.45-186_amd64.deb
    sha:ec9ad40d4fefb895bc37afb13a18fc0cb7d0ed48
  • alt-php54-odbc_5.4.45-186_amd64.deb
    sha:8d874a888f9a2654ec9d02908794ec0d8e76f6bf
  • alt-php54-pdo_5.4.45-186_amd64.deb
    sha:31db19d0aa336a8e3740f7a3fbe371792ebd9d9a
  • alt-php54-pgsql_5.4.45-186_amd64.deb
    sha:a43fea9a1fdc4274b8e5ad634bbdd297e67a55f9
  • alt-php54-php-fpm_5.4.45-186_amd64.deb
    sha:d7c557db73501a21c060ca5ae59a3dd4ee6544af
  • alt-php54-process_5.4.45-186_amd64.deb
    sha:0b9ee0447ca99f2ac247d6b8fc714312d51bd4db
  • alt-php54-pspell_5.4.45-186_amd64.deb
    sha:1d707dbd47958e32aae086331006d9b6d95024c8
  • alt-php54-recode_5.4.45-186_amd64.deb
    sha:1b53c494c76ff07ab33fe238b14cb0ce6ed7f0e4
  • alt-php54-snmp_5.4.45-186_amd64.deb
    sha:71cc8220d84f391de1de9d971c31fbfb8de3485e
  • alt-php54-soap_5.4.45-186_amd64.deb
    sha:ba1dc145441eea6dcb30412bd9c48be4ba919f77
  • alt-php54-sybase_5.4.45-186_amd64.deb
    sha:42a842e2fb5c1aefff535061b7d9dd0a6588e7a7
  • alt-php54-tidy_5.4.45-186_amd64.deb
    sha:4593a99c99a9d0114f3a010a27f3b54c70810129
  • alt-php54-xml_5.4.45-186_amd64.deb
    sha:0614417464b3d41273145bfc393e585d5570a00e
  • alt-php54-xmlrpc_5.4.45-186_amd64.deb
    sha:f78bf37d794b1a5d865cdd02eb81b61a02570927
  • alt-php54_5.4.45-186_arm64.deb
    sha:c658f334875e72b74452bd2758eb7212588af18e
  • alt-php54-bcmath_5.4.45-186_arm64.deb
    sha:a2a0bc2ce8e6143a03a65f19b10cbf1b04ef3c70
  • alt-php54-cli_5.4.45-186_arm64.deb
    sha:1ea1e71567527da9a19f094f203503a1d42636ae
  • alt-php54-common_5.4.45-186_arm64.deb
    sha:c545b184cd855d6735f857017b96065b504db079
  • alt-php54-dba_5.4.45-186_arm64.deb
    sha:e6880bb3cba47702d4de3e34f8c163e7d5965148
  • alt-php54-dbx_5.4.45-186_arm64.deb
    sha:f993ed5921ab32a6ef8b662e46fb333f98f2a57a
  • alt-php54-dev_5.4.45-186_arm64.deb
    sha:7d0d99dda91b06ae03639807f16ab99d2f0c5452
  • alt-php54-enchant_5.4.45-186_arm64.deb
    sha:d25ba6d929532965350c0887083675cd9d9c6a7a
  • alt-php54-firebird_5.4.45-186_arm64.deb
    sha:69a1196d260a2dd1ef6d2e25d28676db2266a6c9
  • alt-php54-gd_5.4.45-186_arm64.deb
    sha:d46fdb7e95f01186846989e9e923403e941ae319
  • alt-php54-imap_5.4.45-186_arm64.deb
    sha:b770cf298037a30591b1aa639f076b9d1fba9422
  • alt-php54-intl_5.4.45-186_arm64.deb
    sha:f4513b065b8f1cbea90f079da99f2c26cbaebae8
  • alt-php54-ldap_5.4.45-186_arm64.deb
    sha:d15f2fafe831ee17ee8b758ddfb1dc115d8fefe2
  • alt-php54-mbstring_5.4.45-186_arm64.deb
    sha:63b2479f9283d94bba53841c7d8a2f389557f049
  • alt-php54-mcrypt_5.4.45-186_arm64.deb
    sha:ec04a74fd2bc30cc5eff8b37ae2ff98e18caf77d
  • alt-php54-mssql_5.4.45-186_arm64.deb
    sha:8d3402e26dc69f60187faaf2593cc6df53b082db
  • alt-php54-mysqlnd_5.4.45-186_arm64.deb
    sha:97eedfcffdd31f0fed737526691412c9c34c344c
  • alt-php54-odbc_5.4.45-186_arm64.deb
    sha:29e6a8ff63a53430dfcc86d634eca0b8bfd813c0
  • alt-php54-pdo_5.4.45-186_arm64.deb
    sha:402e51b80da152fdbfe15da917b2b3c512078199
  • alt-php54-pgsql_5.4.45-186_arm64.deb
    sha:acc9470dc53eca7aa1db226fb26bb93acd0b5bdb
  • alt-php54-php-fpm_5.4.45-186_arm64.deb
    sha:9f0c82b098a751e9eed77b7ef53c0bc8a75584fb
  • alt-php54-process_5.4.45-186_arm64.deb
    sha:7b7e2cb82d83cbe93e65aafabed4caed0ba5a4b1
  • alt-php54-pspell_5.4.45-186_arm64.deb
    sha:86125c6e37e2eff2b3bd9703a4a5a974dc7a8c80
  • alt-php54-recode_5.4.45-186_arm64.deb
    sha:4fe69df128ddb77638d4d73717830b447fd6414a
  • alt-php54-snmp_5.4.45-186_arm64.deb
    sha:c6d04e5340c25d0ffa2b7ad4477971caa5d48bab
  • alt-php54-soap_5.4.45-186_arm64.deb
    sha:2608ef4a4683f2a622e4889946c67f232cdd767f
  • alt-php54-sybase_5.4.45-186_arm64.deb
    sha:53eea44e0ca0705bddd2bd664a58ded2f63e710f
  • alt-php54-tidy_5.4.45-186_arm64.deb
    sha:0b86f9b6ea4ff4931204b29fb042f1c3978d80a6
  • alt-php54-xml_5.4.45-186_arm64.deb
    sha:9d4a5341a29cd771d498c8610a97c2e5606fac07
  • alt-php54-xmlrpc_5.4.45-186_arm64.deb
    sha:1fe3c3d123e1f49a214149089fa71fa915a87607
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.