[CLSA-2026:1784553842] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-20 13:24:27 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with padding (aes-*-wrap-pad). php_openssl_cipher_update() sized the output buffer as data_len + one cipher block, undersizing it for RFC 5649 padded wrap output; reserve an extra block for EVP_CIPH_WRAP_MODE ciphers.
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-64_amd64.deb
    sha:af6335fa204f8012b0bd942be9b0e305ae5dabc8
  • alt-php74-bcmath_7.4.33-64_amd64.deb
    sha:0b8cdb2cdb14c7d69b304329fa9f0c5592f9f496
  • alt-php74-cli_7.4.33-64_amd64.deb
    sha:25a81cf1b9e8ca068366c652d6f015903d862557
  • alt-php74-common_7.4.33-64_amd64.deb
    sha:a91665ae8e84c39b77f8f3ea7999de39619a13a6
  • alt-php74-dba_7.4.33-64_amd64.deb
    sha:424e88f44d07e2f1a219717509540c5cb890e096
  • alt-php74-dev_7.4.33-64_amd64.deb
    sha:1c31ded461567c0c444d712130f625a522a2aec4
  • alt-php74-enchant_7.4.33-64_amd64.deb
    sha:4a02580cde277d0adf255f2a914e5f2015b68941
  • alt-php74-firebird_7.4.33-64_amd64.deb
    sha:124f68d3926497f0abec6bf6db522faebd264972
  • alt-php74-gd_7.4.33-64_amd64.deb
    sha:74b58f506b79dc4008864d98e7c4a70dffe17d5e
  • alt-php74-imap_7.4.33-64_amd64.deb
    sha:1b80492218a87e823a14c64668b676960f06b55d
  • alt-php74-intl_7.4.33-64_amd64.deb
    sha:c930943e836fba50a318c9b6a184cd6c3355eb6c
  • alt-php74-ldap_7.4.33-64_amd64.deb
    sha:a40f9fe40f2b9dba3d943154c2e3c1566b72980b
  • alt-php74-mbstring_7.4.33-64_amd64.deb
    sha:d07f79c94dbc2076263d1cc9d6e4a788121ac75f
  • alt-php74-mysqlnd_7.4.33-64_amd64.deb
    sha:f45daf0fc948baac9c0ee52acd82da1f0b3dda1f
  • alt-php74-odbc_7.4.33-64_amd64.deb
    sha:14e5b289459f04072712e341b7ed3ab9f633a870
  • alt-php74-opcache_7.4.33-64_amd64.deb
    sha:d1fdfaefa8451212a2799930366b0c28be82b1e0
  • alt-php74-pdo_7.4.33-64_amd64.deb
    sha:751fa0d221996aa1233d51e8ad9516c6b07c81cf
  • alt-php74-pgsql_7.4.33-64_amd64.deb
    sha:ccc1f11cc1628dab657a49ce631b38cb99a0ee72
  • alt-php74-php-fpm_7.4.33-64_amd64.deb
    sha:2fb5603cacb5588481fc8a73f3d4f51ee3ef1dc9
  • alt-php74-process_7.4.33-64_amd64.deb
    sha:d28f6e8f44d8f22431bf105d4d06bbec4490216d
  • alt-php74-pspell_7.4.33-64_amd64.deb
    sha:88a7c2fafa7493a07129423e1460845ecb173b71
  • alt-php74-snmp_7.4.33-64_amd64.deb
    sha:6a8121d220b397fc83933a817eceaab7c4fc85bf
  • alt-php74-soap_7.4.33-64_amd64.deb
    sha:d4ebf515e94aee2d57af3d7f39b6642e8004c18d
  • alt-php74-sodium_7.4.33-64_amd64.deb
    sha:3d385583d603848a991847c1f69247f1661a175f
  • alt-php74-tidy_7.4.33-64_amd64.deb
    sha:210ce70f166fc32ed02df46c2003de431a30fde9
  • alt-php74-xml_7.4.33-64_amd64.deb
    sha:4cd4411962428d22859c4162a3c4e0f6ce38853d
  • alt-php74-xmlrpc_7.4.33-64_amd64.deb
    sha:7a2a26c7f4d91b0a5600ace9ca36cefbe0ac3fa6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.