[CLSA-2026:1784617479] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-21 07:05:05 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap padding (aes-*-wrap-pad) ciphers - debian/patches/php-8.0-CVE-2026-14355.patch: reserve an extra EVP_CIPHER_block_size() block for EVP_CIPH_WRAP_MODE ciphers in php_openssl_cipher_update() (ext/openssl/openssl.c) so RFC 5649 wrap-with-padding output no longer overflows the zend_string buffer. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-54_amd64.deb
    sha:e4a39c811fca1667f5cbfa24d3b53fb5bd04d7be
  • alt-php80-bcmath_8.0.30-54_amd64.deb
    sha:24b2442053b29b7c362f0cf5d132e10d0e096764
  • alt-php80-cli_8.0.30-54_amd64.deb
    sha:e88a8ec60035ab0ae32caa5699e1b73a77325ef1
  • alt-php80-common_8.0.30-54_amd64.deb
    sha:447480f7d7bbb01a8bdbc748e1346f0401405c4f
  • alt-php80-dba_8.0.30-54_amd64.deb
    sha:cfa1210cce011ad671a60f9ffed49c71bb3f15e6
  • alt-php80-dev_8.0.30-54_amd64.deb
    sha:c0e215d788b965f87291ce796556b7f505dc8a63
  • alt-php80-enchant_8.0.30-54_amd64.deb
    sha:e64f292329810bc7546ec9d73d7f5f7c4ebed00c
  • alt-php80-firebird_8.0.30-54_amd64.deb
    sha:415e2ea1aab744148b4b21e70d97033eff2369d3
  • alt-php80-gd_8.0.30-54_amd64.deb
    sha:90746e3fa24052ec9908c3248087ca5ecd2d3708
  • alt-php80-imap_8.0.30-54_amd64.deb
    sha:46b25a759914af7aa62c08769ea8524a28c154e2
  • alt-php80-intl_8.0.30-54_amd64.deb
    sha:fd95f31dd3be263357696ccd320951b00b132197
  • alt-php80-ldap_8.0.30-54_amd64.deb
    sha:f03cefbf1b66a39aeb8c82600afa8aa48bbf4d13
  • alt-php80-mbstring_8.0.30-54_amd64.deb
    sha:57975be8d892d34f7fcba2c1bddabe277559d6a0
  • alt-php80-mysqlnd_8.0.30-54_amd64.deb
    sha:720a2c0479853411e028276d324707187f7733e5
  • alt-php80-odbc_8.0.30-54_amd64.deb
    sha:40f9b686a90fc8cb0410d2a3a977fd2f86f73f9e
  • alt-php80-opcache_8.0.30-54_amd64.deb
    sha:f9138c43e195e7155b9b0492e168cfd48d4f58b6
  • alt-php80-pdo_8.0.30-54_amd64.deb
    sha:aa8fb1b6c0a5472a147c17b65342ac5177935302
  • alt-php80-pgsql_8.0.30-54_amd64.deb
    sha:f2d71c08eb758facad1ad1038eff33a998e1267e
  • alt-php80-php-fpm_8.0.30-54_amd64.deb
    sha:7eb79fa93611a4009bd0cab05dd353ee8730ac98
  • alt-php80-process_8.0.30-54_amd64.deb
    sha:9582df113fabcd8341b764c6a2c622a895ed24c0
  • alt-php80-pspell_8.0.30-54_amd64.deb
    sha:7d4251c29af7688f4a3f834de20d0c1ff217a277
  • alt-php80-snmp_8.0.30-54_amd64.deb
    sha:616c85dfff5c2fd11eba1b13c794eb65173f25ec
  • alt-php80-soap_8.0.30-54_amd64.deb
    sha:df8c427de54a97d3d44fb4d4ef5603a5a21e98e7
  • alt-php80-sodium_8.0.30-54_amd64.deb
    sha:8c91604c437e8a5c78b91ea82c3a7675665fd57f
  • alt-php80-tidy_8.0.30-54_amd64.deb
    sha:b7960c33e397ee2c6389ff80c56f418078450ffd
  • alt-php80-xml_8.0.30-54_amd64.deb
    sha:2fbbdb8adf11b3b7f31510462efb2cde3e520b64
  • alt-php80_8.0.30-54_arm64.deb
    sha:1275a0fa46e09963144ef41fb8e5320343a18417
  • alt-php80-bcmath_8.0.30-54_arm64.deb
    sha:ea4c30ad914b7bf330bad68ec3b40b06e8c7c1cc
  • alt-php80-cli_8.0.30-54_arm64.deb
    sha:3e8a53ab969e38aa4cfb0fc947d0088591dce4ef
  • alt-php80-common_8.0.30-54_arm64.deb
    sha:9c1e3c428a079c8586627ff17fdfa24dee920d6c
  • alt-php80-dba_8.0.30-54_arm64.deb
    sha:c4d3767d6fda7719f254ef91081c3b713c6b15a7
  • alt-php80-dev_8.0.30-54_arm64.deb
    sha:12d58edc44f488c95d66a7223cc6065049c862db
  • alt-php80-enchant_8.0.30-54_arm64.deb
    sha:870d967d6c209b43c5878b63e45cf942830e7bf0
  • alt-php80-firebird_8.0.30-54_arm64.deb
    sha:7c11b6e7dcf09089be77f8df4c028ea848d3704d
  • alt-php80-gd_8.0.30-54_arm64.deb
    sha:2aa3c535fc207746085a6d130d0725ac41689a0d
  • alt-php80-imap_8.0.30-54_arm64.deb
    sha:156dc53ea670148271ad274365464088175343ad
  • alt-php80-intl_8.0.30-54_arm64.deb
    sha:af9522ed5f3f14eed3559df8b872143a2377b6b3
  • alt-php80-ldap_8.0.30-54_arm64.deb
    sha:1a0c767c3cd43986c218335e126d0a8e5e532501
  • alt-php80-mbstring_8.0.30-54_arm64.deb
    sha:212e8387b216d4ec3bd76aff15116e130a19b667
  • alt-php80-mysqlnd_8.0.30-54_arm64.deb
    sha:76c985d031f8eccdbd6e35c577e01011b564936f
  • alt-php80-odbc_8.0.30-54_arm64.deb
    sha:99eb488e37f1220e96482f59f0c95a049711e5c4
  • alt-php80-opcache_8.0.30-54_arm64.deb
    sha:29097c31b3c61c072022a216bd8f3f0dded61b52
  • alt-php80-pdo_8.0.30-54_arm64.deb
    sha:87518b8cfd8d8d891993b1d6362fbe3fdf6d1de4
  • alt-php80-pgsql_8.0.30-54_arm64.deb
    sha:083b24ad164018512b1e10c35afcc8562fe71a29
  • alt-php80-php-fpm_8.0.30-54_arm64.deb
    sha:9733687958714db3d4ab3a0252134867070e2857
  • alt-php80-process_8.0.30-54_arm64.deb
    sha:5dd0ca1971ec10111e3fbc83f1e9bed6fd7e4531
  • alt-php80-pspell_8.0.30-54_arm64.deb
    sha:f6a8f220ef88c3ae7426f6bae32a9a2e5d2574e4
  • alt-php80-snmp_8.0.30-54_arm64.deb
    sha:16024d8e2e79cc0be3f4aaaeff61995c89136d5d
  • alt-php80-soap_8.0.30-54_arm64.deb
    sha:a27e1271bc42d54083bc5390b62d5d7092466f49
  • alt-php80-sodium_8.0.30-54_arm64.deb
    sha:68609dc354fd10824467c07dae188f58fd9574dc
  • alt-php80-tidy_8.0.30-54_arm64.deb
    sha:5b16d83da5c4842447cfbeb03af2bb18375f393f
  • alt-php80-xml_8.0.30-54_arm64.deb
    sha:dd54c7a73b6fcda801b6d97848ed4d8abecd3f41
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.