Release date:
2026-07-20 16:31:06 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding
(aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one cipher
block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and
overflows the heap when built against OpenSSL 3.x. Backport of upstream commit
cbc0489126 (GH-22187): reserve one extra block for EVP_CIPH_WRAP_MODE ciphers.
(5.6 has no php_openssl_cipher_update() helper; the fix is applied to the inline
allocations in both openssl_encrypt() and openssl_decrypt())
Updated packages:
-
alt-php56-5.6.40-133.el8.x86_64.rpm
sha:3e58214d445d35eec065fc80037f99ad547c3113815f7803477a8d664173d82c
-
alt-php56-bcmath-5.6.40-133.el8.x86_64.rpm
sha:817b1ebb313247c667ff87c9d43e8881f0349fc0a15e2dd9aafcbc82b8465d0b
-
alt-php56-cli-5.6.40-133.el8.x86_64.rpm
sha:0d0e99b0de7a3dca638d97039a292a4625d1b0125eaaa3076a89e6b9daab01ae
-
alt-php56-common-5.6.40-133.el8.x86_64.rpm
sha:99da1410feda5fe0dff71a9a2956cba9fd261c72a7de730ad1d8699ad683b610
-
alt-php56-dba-5.6.40-133.el8.x86_64.rpm
sha:480750ab416bdf46c4c8e1a7ad64f685ca787fbb9cbe41bced8231aac3fa59da
-
alt-php56-dbx-5.6.40-133.el8.x86_64.rpm
sha:17e5c2c8d219b1564de2a57348c886171a0c3a26ce0c09829b8e5883c847b118
-
alt-php56-devel-5.6.40-133.el8.x86_64.rpm
sha:63a5318dd324602ac7c37792e1cf3af5574cd5af14dfea4094936075ec7aeed5
-
alt-php56-enchant-5.6.40-133.el8.x86_64.rpm
sha:b72ab8bda4ab9f555268f4ce47fbcfa24cfd7f01c7e862c3ed563252747800ad
-
alt-php56-firebird-5.6.40-133.el8.x86_64.rpm
sha:5b3973a3d186fd22d3b4941c4e5e7412aeb5b656c3749809e582e09f84c2a011
-
alt-php56-gd-5.6.40-133.el8.x86_64.rpm
sha:30f46649320202aaed29b52335dbb34d2680854bd413513a408cdb10cffce4de
-
alt-php56-imap-5.6.40-133.el8.x86_64.rpm
sha:e0bfb6b6ab1afb2a1dc502bbbf940b96a0954d34f0101e269d0aa03a680d598f
-
alt-php56-intl-5.6.40-133.el8.x86_64.rpm
sha:7f0060cf5938aa8b639adfabbc4e3a27c8f3176dd07e7ad1be0d3839894e6891
-
alt-php56-ldap-5.6.40-133.el8.x86_64.rpm
sha:4374f03c3f509e47bac336bb4d5cd6b33384a93fbd7b53bc38cf962cf1ffa199
-
alt-php56-mbstring-5.6.40-133.el8.x86_64.rpm
sha:7eba3534aad08452f51335d7d6cd08e18bf61fc201eda90514f0345fa26802ec
-
alt-php56-mcrypt-5.6.40-133.el8.x86_64.rpm
sha:14372567d705bb3e8ec635b85d01d3d4cdd0054bb2aeefa5cb6d647ef788643a
-
alt-php56-mssql-5.6.40-133.el8.x86_64.rpm
sha:94312a905bd32d69269ba160b08d6e52b17d7cc5fe3a11f11dff972fb711d336
-
alt-php56-mysqlnd-5.6.40-133.el8.x86_64.rpm
sha:661bdcfcb12a60ffc2f4b119cb5238e493d34fadb9d49f1a9b5ce15965985bb7
-
alt-php56-odbc-5.6.40-133.el8.x86_64.rpm
sha:3d50a366ee29e7297d406fb608aa0aeae8587844b097afe3d8a42f3fb0700fc4
-
alt-php56-opcache-5.6.40-133.el8.x86_64.rpm
sha:36796d2cf7396d857110cd5f0ba93efdf7a637503fd1073257afb36ff749db9e
-
alt-php56-pdo-5.6.40-133.el8.x86_64.rpm
sha:b22f97884b568fcb9821752eb9a9f2fcc4fdeb22e3f97987933275b6714bfa13
-
alt-php56-pgsql-5.6.40-133.el8.x86_64.rpm
sha:cfb503522a8553c29404cd5e7087d172d93683e0afe541e82b6b7fef1a5fa238
-
alt-php56-php-fpm-5.6.40-133.el8.x86_64.rpm
sha:ef426928f12965916385da4e2e994cb5603360cd548ff017b2bac8803e38c7af
-
alt-php56-process-5.6.40-133.el8.x86_64.rpm
sha:84cc0138f33495c02d9ee1ced2a6607cf0b2c200e1501ba3d172b2946a11e80f
-
alt-php56-pspell-5.6.40-133.el8.x86_64.rpm
sha:3aa7c64fa8c0afb441aba4168594b060fbc267d8b01a967707b5e6d9c9a2cdfa
-
alt-php56-recode-5.6.40-133.el8.x86_64.rpm
sha:5e6b6c060806cb29ec2a09f26ac639d67617ff39d2146812f95c49c62758da31
-
alt-php56-snmp-5.6.40-133.el8.x86_64.rpm
sha:694309f894794bfea75f85e11889c087ef570462f5f70f59de6c50ea31279d6c
-
alt-php56-soap-5.6.40-133.el8.x86_64.rpm
sha:3c85dcc68be82b6fe4da799ba49919c1fcf381a17578833f876535a386396838
-
alt-php56-sybase-5.6.40-133.el8.x86_64.rpm
sha:560ca005adb0184ab061b23fc67515b595145d56480800a7546b428d514a56ce
-
alt-php56-tidy-5.6.40-133.el8.x86_64.rpm
sha:2f9d15240069d0dc01df5a78a99d11267c7399d151a681356072f776afbd12c4
-
alt-php56-xml-5.6.40-133.el8.x86_64.rpm
sha:ec5e96d8f10664b6bb1609b46ccd7ab92572e1eae9c61a0bb9d2c8c58c9a66b0
-
alt-php56-xmlrpc-5.6.40-133.el8.x86_64.rpm
sha:94161b0bab98ba1b2f8cfd39f6811e2ed7c0ede8751b181c34996636947c3dc7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
