[CLSA-2026:1784304820] alt-php70: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-17 16:14:05 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow with AES key-wrap-pad (aes-*-wrap-pad) ciphers; the output buffer was sized as data_len + EVP_CIPHER_block_size, which under-sizes RFC 5649 padded-wrap output. Reserve an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream php-src cbc0489126a7682796aad1e5fb4e51de74af162c)
CVEs fixed:
Updated packages:
  • alt-php70-7.0.33-135.el6.x86_64.rpm
    sha:2909180004d2caadf900eeb6cc3f90f4ba18952d197d8beee7c7bf7887bad54f
  • alt-php70-bcmath-7.0.33-135.el6.x86_64.rpm
    sha:faba2ad97e2ca82e25601b023a7c309314b5d8925351d82f1a7230da8d8e8cc0
  • alt-php70-cli-7.0.33-135.el6.x86_64.rpm
    sha:c4fb3e09a158dfe0e389e33b24621686d145e9f1d78fed61a7af0d8ec6c142b2
  • alt-php70-common-7.0.33-135.el6.x86_64.rpm
    sha:227d0338dcf4c1232ee8003f1d813c908bd72c8ea0eb5d9beb19acb2ecface4f
  • alt-php70-dba-7.0.33-135.el6.x86_64.rpm
    sha:e59bcba0a293c687a26d4d6495d28e42db07b5edb60c45d529f9e9782db34b08
  • alt-php70-devel-7.0.33-135.el6.x86_64.rpm
    sha:64bfbef98e53092aa8ba9f6313b1ddcd944f0fa5af22ef412fd88f86f49b591a
  • alt-php70-enchant-7.0.33-135.el6.x86_64.rpm
    sha:3692055c5a0e16466cb1a7ec05e0040d3975c68f3d280332b451e61ddd908240
  • alt-php70-firebird-7.0.33-135.el6.x86_64.rpm
    sha:6b8314778dceb11c4fbaa60951f035708c34703d43290a3b3fc062d69f4b2cf3
  • alt-php70-gd-7.0.33-135.el6.x86_64.rpm
    sha:b73b67ba48c7411d2c0f60aa860579c28337de2f1dcb38ef793208de1e18c2eb
  • alt-php70-imap-7.0.33-135.el6.x86_64.rpm
    sha:e94de9c6d72af4e53cfe997aab1db64161f0d193407386e96ada760c3a8833ac
  • alt-php70-intl-7.0.33-135.el6.x86_64.rpm
    sha:32b2992f7b3e8f6399d2984cbfd38871f009922a62629bae51e4c03aab183bf4
  • alt-php70-ldap-7.0.33-135.el6.x86_64.rpm
    sha:02bf887eb8c85831f89c65bd744d8fd75c8dd08526d4abe7c13197993e8ffd36
  • alt-php70-mbstring-7.0.33-135.el6.x86_64.rpm
    sha:43e859c240155b6728ba64dc7d04f994f0ac177b35c39624427e51ec9ab94984
  • alt-php70-mcrypt-7.0.33-135.el6.x86_64.rpm
    sha:a1c9d85db376dc5b38cf7f232dbb46e2bcba752dcc0e48bfbb4b72852f9c36e9
  • alt-php70-mysqlnd-7.0.33-135.el6.x86_64.rpm
    sha:065d7894503d05738a20edeffb2fcaf561a110a8f42707b82fb17d2561815017
  • alt-php70-odbc-7.0.33-135.el6.x86_64.rpm
    sha:2368b7c9900c1d61319a5b36542d1161d2247421d3b04137a75ae55b2f631606
  • alt-php70-opcache-7.0.33-135.el6.x86_64.rpm
    sha:198ee5286ed91fd6427060613a411a3b5c82d0cd2b7449ab2e965ae592afe67e
  • alt-php70-pdo-7.0.33-135.el6.x86_64.rpm
    sha:eabf2423600000ebfa1836ab669fc96b815233edf06e460511d3027d8a65bed5
  • alt-php70-pgsql-7.0.33-135.el6.x86_64.rpm
    sha:14f99fe78e16dd9187d7b947b3f14aeea033c0a48e848a8124f806f8c0d37e28
  • alt-php70-php-fpm-7.0.33-135.el6.x86_64.rpm
    sha:100eb88fe2ffebe4601686a63370b68740e2ab5888d8c68d11f30d87b32b868c
  • alt-php70-process-7.0.33-135.el6.x86_64.rpm
    sha:ea15516f2648a954b83a63f063aded434632c6a83b2616c3aa0ccfc3e9cba08f
  • alt-php70-pspell-7.0.33-135.el6.x86_64.rpm
    sha:fc14754379bec9c40902e91e088d70b6b767befb499df1d90b2e850f3a03f897
  • alt-php70-recode-7.0.33-135.el6.x86_64.rpm
    sha:e69a29e1884fca29930a58fa64efc64fca9a9e051710a01d726ad2d5d7aea356
  • alt-php70-snmp-7.0.33-135.el6.x86_64.rpm
    sha:ea63e306ce3ecd303e870eb387be050af2e20314d7487678494f840e0f587572
  • alt-php70-soap-7.0.33-135.el6.x86_64.rpm
    sha:7b4b1c113dc8ee36746e213a870b663905090160f656473c84d9ec56c2e4d0a8
  • alt-php70-tidy-7.0.33-135.el6.x86_64.rpm
    sha:ad43935b84c2b4cd0e5d73e6eebca1f222e27d0e12d0cbcf2740ff3c8fb6295e
  • alt-php70-xml-7.0.33-135.el6.x86_64.rpm
    sha:39f78f43ce082ca29959c03593b005e0d3a7b3ad35b759707b2a8d98e2c9eb3a
  • alt-php70-xmlrpc-7.0.33-135.el6.x86_64.rpm
    sha:2140c100fda1a960c1b3fa6deb4f67b872376b6106f5d3b7d8fec6140fa27bca
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.