[CLSA-2026:1784569655] alt-php55: Fix of CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 17:48:03 UTC
Description:
- CVE-2026-14355: heap buffer overflow in openssl_encrypt()/openssl_decrypt() with AES key-wrap-with-padding ciphers (aes-*-wrap-pad, RFC 5649) when built against OpenSSL 3.x (ELSLANG-59751, ELSLANG-59676, ELSLANG-59675, ELSLANG-59687, ELSLANG-59692) - debian/patches/php-5.5-CVE-2026-14355.patch: backport upstream cbc0489126a7682796aad1e5fb4e51de74af162c (GH-22187) - reserve one extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers at the output-buffer allocation. 5.5 has no php_openssl_cipher_update() helper, so the fix is applied to both inline call sites (openssl_encrypt + openssl_decrypt).
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-167.el9.x86_64.rpm
    sha:e0fdc23914eeee80d7a912bc07815695fc26eaa48a3e386e9321bb4a51196cc4
  • alt-php55-bcmath-5.5.38-167.el9.x86_64.rpm
    sha:9619f8eff495f597645424699b4088053b9d854486bd989c20594abf88852b97
  • alt-php55-cli-5.5.38-167.el9.x86_64.rpm
    sha:0415c45c6fc3735b5f35401d5243fb89f959a368aa72d119c86c85f398d3c0ef
  • alt-php55-common-5.5.38-167.el9.x86_64.rpm
    sha:faef2dd1312892a3b4da87348d12b29a9737ed88056ac9963e8992bac0e28dc4
  • alt-php55-dba-5.5.38-167.el9.x86_64.rpm
    sha:99df010bb4fac3a0689e41840621b190c6d71310ca7fb68a9d0c35210c3821a6
  • alt-php55-dbx-5.5.38-167.el9.x86_64.rpm
    sha:05bd9388abf712bd83d5d62d7a2c179cd791e528053c2bb07af9b022e06b24c1
  • alt-php55-devel-5.5.38-167.el9.x86_64.rpm
    sha:71abc771da8b7bec83e9d160bd48e214447b399ad672f26bd353a5a97a2b5287
  • alt-php55-enchant-5.5.38-167.el9.x86_64.rpm
    sha:3a0596d2d2fdf2134eef181ff4dc4b9362726fc26785deb00a90eddd698acb82
  • alt-php55-firebird-5.5.38-167.el9.x86_64.rpm
    sha:0abcdd29723731d10b04d672808a2b6c403555f8908120f846646f99d441283d
  • alt-php55-gd-5.5.38-167.el9.x86_64.rpm
    sha:7123bce8d430f8ea509e4dd246170c865943c9a7233b6dfb3db897c8145863af
  • alt-php55-imap-5.5.38-167.el9.x86_64.rpm
    sha:ea82f0ac9a1fdb00e81040a7ae80a7116369b31089424559d53214102766f0c2
  • alt-php55-intl-5.5.38-167.el9.x86_64.rpm
    sha:5d74015efe670c6b2eb1387b18ec15509baea58b4ace31ab44d8e38d559387b0
  • alt-php55-ldap-5.5.38-167.el9.x86_64.rpm
    sha:b1855c625bee01b886127c3d5468f5c6e30fabf249050ead1d6eeb0311aacedb
  • alt-php55-mbstring-5.5.38-167.el9.x86_64.rpm
    sha:0e62d9d94b3f0e876c95fd91476ae5a1e6ab4a78b70b2a50cc565b28a21bc8c5
  • alt-php55-mcrypt-5.5.38-167.el9.x86_64.rpm
    sha:347ef4f037b9a33f6761007a80afdf3531e8c0615e867fedc4fc88eafc0eabed
  • alt-php55-mssql-5.5.38-167.el9.x86_64.rpm
    sha:f8d433da67444116ae527916e11969e5521078eac098308aaf3c32a0453454c7
  • alt-php55-mysqlnd-5.5.38-167.el9.x86_64.rpm
    sha:139f97939abff268eb29511be367ee0a6804d0a81cd6e2849b29b47974b12221
  • alt-php55-odbc-5.5.38-167.el9.x86_64.rpm
    sha:dec4d388eeb352ddcbdb5f176a1339c6fe0db925d30ab47d33edaa5ec02d5bd0
  • alt-php55-opcache-5.5.38-167.el9.x86_64.rpm
    sha:091a875ba12e834277bd192c5dd1c654137fb747c9a84449c8c60d93b06a6e6c
  • alt-php55-pdo-5.5.38-167.el9.x86_64.rpm
    sha:0fb77c58c2019aa83da521aa563c0502ee155b04681e857e4b9aea0790b80078
  • alt-php55-pgsql-5.5.38-167.el9.x86_64.rpm
    sha:f8007d8e48ba19efcb61b3cfe1cf05ce90ac09db7e973f3a5d1ad61ac4305c7d
  • alt-php55-php-fpm-5.5.38-167.el9.x86_64.rpm
    sha:68b7435ccc737cf2d9c680dcde9d9e695e1b4be3766256a555a7a6c7f453f9ac
  • alt-php55-process-5.5.38-167.el9.x86_64.rpm
    sha:40b52212ef3f3aad89f27aeff2325d3cc744537beb30b41237a76e1a40956c59
  • alt-php55-pspell-5.5.38-167.el9.x86_64.rpm
    sha:d6162ce52c93f0f90a30b6250fb7f5d3278d2237d0875d201aa663f64754a37d
  • alt-php55-recode-5.5.38-167.el9.x86_64.rpm
    sha:6ba7172faca58b30634238cce8407853a0b29e2f14eb513cfdb17ec6a7c21a31
  • alt-php55-snmp-5.5.38-167.el9.x86_64.rpm
    sha:92538b6a9be9ea614c12f77bee761d5abba91b066299b64db7b801be33aead4c
  • alt-php55-soap-5.5.38-167.el9.x86_64.rpm
    sha:3658ea62211d193c0a76eb5a457f8445779691136103f82676f7779c42823e8e
  • alt-php55-sybase-5.5.38-167.el9.x86_64.rpm
    sha:71c46974b43295d6abac01725e8358d7a36050b4c4939baa0dcee0220fc5d46b
  • alt-php55-tidy-5.5.38-167.el9.x86_64.rpm
    sha:15b7ad3f479bdf3819e9a768e098d7be494987ba6186712dd7b5e2e475b400be
  • alt-php55-xml-5.5.38-167.el9.x86_64.rpm
    sha:9a1d84d3f016c6c462dee75e95a3493cc2d2494e9b333a9883857bf0c31d3bff
  • alt-php55-xmlrpc-5.5.38-167.el9.x86_64.rpm
    sha:2b090b77a757c7cf5d677f0a1e1afb5682e642ac23d80642fd706235f331bbb2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.