[CLSA-2026:1784277133] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-17 08:32:37 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-with-padding (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + one block, which under-sizes the RFC 5649 padded-wrap output (roundup(len,8)+8) and corrupts the zend heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE.
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-84_amd64.deb
    sha:89630a4f00aa49ba9bc4e99375fdafec1cb0f220
  • alt-php72-bcmath_7.2.34-84_amd64.deb
    sha:6968822eb83d2f958cf0e82c0fd3f1984e2de337
  • alt-php72-cli_7.2.34-84_amd64.deb
    sha:2d43d10bf0fb379d6ce617c4ca46c561baadfaf2
  • alt-php72-common_7.2.34-84_amd64.deb
    sha:01e1a04c1b17ab2e5c1874f9e9b7ae31c6897f7d
  • alt-php72-dba_7.2.34-84_amd64.deb
    sha:3360f64167408d79505cda3a61723d38e4b9c601
  • alt-php72-dev_7.2.34-84_amd64.deb
    sha:f3ce2137f2d99bd09b2ba407fce46a3b10773819
  • alt-php72-enchant_7.2.34-84_amd64.deb
    sha:a2024fc267f0bd005a06d2012106739cdf39c082
  • alt-php72-firebird_7.2.34-84_amd64.deb
    sha:1b3ea7c6f3a9b1765ba2733b62fbbe5f77edbace
  • alt-php72-gd_7.2.34-84_amd64.deb
    sha:5a6e896b1aa5ab5398a2cf176de9eac8dee6e2ae
  • alt-php72-imap_7.2.34-84_amd64.deb
    sha:70f07ed51c1bd2bb7a37f1e6398a8ca7c2af3842
  • alt-php72-intl_7.2.34-84_amd64.deb
    sha:f9695369de84ae59f7fa705edbabb7b319fb94fe
  • alt-php72-ldap_7.2.34-84_amd64.deb
    sha:9841233075fe0903cd3e4fe9ec5b966a224a52a1
  • alt-php72-mbstring_7.2.34-84_amd64.deb
    sha:a3bb7a424b8cd4c088731055654c66d319493196
  • alt-php72-mysqlnd_7.2.34-84_amd64.deb
    sha:ac392158b0c4d1669fcf61d13d39c01ed9aaab26
  • alt-php72-odbc_7.2.34-84_amd64.deb
    sha:d50d3a574ee872e0b4fba7d73a6bb03f4e23b615
  • alt-php72-opcache_7.2.34-84_amd64.deb
    sha:8dffb3f205540d6f53da16ed2914be8c1a049836
  • alt-php72-pdo_7.2.34-84_amd64.deb
    sha:46a2325b95fb7c3668fd9005178e88a742fc869f
  • alt-php72-pgsql_7.2.34-84_amd64.deb
    sha:3b905014a839de134a621bafc50607a72e3a4b5f
  • alt-php72-php-fpm_7.2.34-84_amd64.deb
    sha:94b2963e2e635bdde2e2ec9c9c2f2c7d8fe129bf
  • alt-php72-process_7.2.34-84_amd64.deb
    sha:b28f5b6c54c27c99e49868626e0beef4d917a8d8
  • alt-php72-pspell_7.2.34-84_amd64.deb
    sha:1ca3d75674b6bbc3ea264c09e600a56b7d582345
  • alt-php72-recode_7.2.34-84_amd64.deb
    sha:b176bda3aa333268df4bd483b876f862a70bd143
  • alt-php72-snmp_7.2.34-84_amd64.deb
    sha:16c7853ed0f44672e6360d6b6027107e7c6d658e
  • alt-php72-soap_7.2.34-84_amd64.deb
    sha:1ed62990d0df18ec7f2530627e96e4603c257adf
  • alt-php72-tidy_7.2.34-84_amd64.deb
    sha:aaf58c502aee81247849f2e250c4399d53526918
  • alt-php72-xml_7.2.34-84_amd64.deb
    sha:46c4555fec8de630f7387f9deb25067166898ba4
  • alt-php72-xmlrpc_7.2.34-84_amd64.deb
    sha:41264cec823cc6b21655222fec5a094565fc916f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.