[CLSA-2026:1784563300] alt-php74: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 16:02:08 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74-7.4.33-64.el10.x86_64.rpm
    sha:8e1a1c5e69dbecf4f01edf3a4facc7cf9044f8a948807e3005820575671f2eaf
  • alt-php74-bcmath-7.4.33-64.el10.x86_64.rpm
    sha:ef4a9e6f3f2e91ce67fb51d73c7d068c515ed9d4d1677d2d9b460e0a5c5ac63c
  • alt-php74-cli-7.4.33-64.el10.x86_64.rpm
    sha:a0b19e3811dd19a87aaeddebf712358b7eee5fbbeef46626238b979b27ee27c7
  • alt-php74-common-7.4.33-64.el10.x86_64.rpm
    sha:25582de574ac8390a9f1056e2f678145d3d118b36d309976391af3cbe14e4dad
  • alt-php74-dba-7.4.33-64.el10.x86_64.rpm
    sha:4a38086d289828e834bb13e6956b153cdab03f190e236d95897ddc825ee6a08f
  • alt-php74-devel-7.4.33-64.el10.x86_64.rpm
    sha:7b564423d42e90f56226a8b623aed9e6c9d581bd1c0b8b2561c25c309d583b06
  • alt-php74-enchant-7.4.33-64.el10.x86_64.rpm
    sha:32f563375d17e5df4cd74030b10a047ccd73ea8f499adc03fbd7db9ca1f505dc
  • alt-php74-firebird-7.4.33-64.el10.x86_64.rpm
    sha:9133257f34500a01b6019e467fbc1fe29d555f158d0c3c0e138ae192e8309246
  • alt-php74-gd-7.4.33-64.el10.x86_64.rpm
    sha:eb77b33528c2e4e08d640a395c9c8015a0c3931fdc2435f7d8cf58d200197c0d
  • alt-php74-imap-7.4.33-64.el10.x86_64.rpm
    sha:054a9aba5a5e0ddf8b98a3f0b2834636a3c56df397258b125e407a01b4118c6a
  • alt-php74-intl-7.4.33-64.el10.x86_64.rpm
    sha:5f4bca84ba8f18080ef295df1071fb77cf8481595d88cedb80d3a7dd9ecbe136
  • alt-php74-ldap-7.4.33-64.el10.x86_64.rpm
    sha:40faf1618e2389a3786fb2ab140cc34c3f745ba7fc1dd322521be74070a8ea1b
  • alt-php74-mbstring-7.4.33-64.el10.x86_64.rpm
    sha:37dd7147acddfe0aba24e5849e0bc8d4fc91bec7e10402ed7f45923cbde9f832
  • alt-php74-mysqlnd-7.4.33-64.el10.x86_64.rpm
    sha:fa059d651b8a87a9472023403b580aff9996046bb597370c5cea07ddde2c6a16
  • alt-php74-odbc-7.4.33-64.el10.x86_64.rpm
    sha:039e98dd57456469bbaf0f5b46150764e798b63564706a8b80b09755f4ea573c
  • alt-php74-opcache-7.4.33-64.el10.x86_64.rpm
    sha:a4b64ddf72e53b99ce122a057fbe01c8518339cc840e686ec8857ef237eec8ac
  • alt-php74-pdo-7.4.33-64.el10.x86_64.rpm
    sha:470c9e3b13dbc8ee6c16afb4377dd0e5a2f5d6f1a595babbc52a5170e3e5186a
  • alt-php74-pgsql-7.4.33-64.el10.x86_64.rpm
    sha:d307211c5d158a64e27af118ab4d3d1129652d9fb3fdecae6d4c684d63222606
  • alt-php74-php-fpm-7.4.33-64.el10.x86_64.rpm
    sha:2dd6681441cfb764edbde7ac26fc1b906756c368ed824ce3169a15f79b2a5a4e
  • alt-php74-process-7.4.33-64.el10.x86_64.rpm
    sha:9b7fa31f842f8d530dd9927dc48ca4cc333b8d00921ec1b6c43277b784feb7a2
  • alt-php74-pspell-7.4.33-64.el10.x86_64.rpm
    sha:79f7d8c23a6cd74072468d4309910e60dddfcc939f1bf58b17d83d729b1c8469
  • alt-php74-snmp-7.4.33-64.el10.x86_64.rpm
    sha:d969d4f9507a129302d4f20fd9a57e2225892c835f5ff690be3899457a534c6e
  • alt-php74-soap-7.4.33-64.el10.x86_64.rpm
    sha:b5df2e89f7436e303266cac5540ed503c940c23ebe1ae540122057396512892b
  • alt-php74-sodium-7.4.33-64.el10.x86_64.rpm
    sha:d5e8f01b2e80c8a7d4dbf6ba99d63aaf24a311fff32c1db7f0fde7dd6af43d1c
  • alt-php74-tidy-7.4.33-64.el10.x86_64.rpm
    sha:b1d357481af77b39c0eae4ab54a0496768fc2fdf85b49951298bfc8eef223a84
  • alt-php74-xml-7.4.33-64.el10.x86_64.rpm
    sha:2d5f747dd8368e916b0441505e7d9fae35bd4dc29ab8f6c91f06ad7b985a521e
  • alt-php74-xmlrpc-7.4.33-64.el10.x86_64.rpm
    sha:362faccc25a969e90cf24ac31ea353bc0d10f54c35430e858254c496a84c714b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.