[CLSA-2026:1784566257] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 16:51:25 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:af6335fa204f8012b0bd942be9b0e305ae5dabc8
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:90b331e0ce1ebeb70a89793b45a8eae8b5f17b07
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:98c6198d63182e736faa50b95517f1b33c6794f7
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:55c2069048b6c885be0a07db36b0873ce2c38486
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:ae57069843df41c8a845d6fe1466257272202330
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:568b9a54272b44cbb542a00f44cf100624e250b3
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:a37758c57a087f61012715b024994421f1726155
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:36a592f1922389299b8b867547c86f3a5b16da93
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:6e8d378e4e004e06ff9cb32f34e0a816a709c81d
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:06b6ead03c34267c178b27ddda6353478653ee9f
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:f76d0aefb44affc17a055221e18777ca49229cf7
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:b768f4dd2fb9ee7d5ae03244b44104ecccda9d4c
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:a350997039f7c7c14c73db076546039564e14168
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:68e1039e46f9c47f641a88f5703a20f58192a3e1
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:7ba5638f25926793fd1187cabc7b06b302099e6d
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:60d6b586500d3ecccc1962c6684b77888fc71489
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:142fae5b4c031608d022ba57eac305f0508e6135
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:8d0339ace90847b1ae599dae98a332aadd25db70
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:55023fde1a36f2c37be24c3cac58040ebf976548
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:be61b581d20e0c358af3004df865b2945ff8304f
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:a8650c08e5a0bb2b8aca1a30545e001d34fcdce1
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:11d04911f926ff240a870b41f91a86b6bdd151c3
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:861056e0b9c78e1ae31fca5a3d3e6110644773b1
  • alt-php74-sodium_7.4.33-64_amd64.deb
    sha:68ec4dbd2420a6a094347f3d4112b40273709642
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:e16ec9ab9cb0a29f0c649d5bdc5af17909446c0e
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:32840ab9df2102e12da34a523707a53c8235b3b6
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:ddfa856e5fefb14c10c4112d72aaf8e37145c947
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.