Release date:
2026-07-14 22:52:50 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-pad (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + EVP_CIPHER_block_size, which under-sizes RFC 5649 padded-wrap output and overflows the heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream php-src cbc0489126a7682796aad1e5fb4e51de74af162c).
Updated packages:
-
alt-php70_7.0.33-135_amd64.deb
sha:501320ca0904e68b49da0cc496461b70efbbc1be
-
alt-php70-bcmath_7.0.33-135_amd64.deb
sha:e6dddefddefaebf7e7a4330481789c5c9e09bb8f
-
alt-php70-cli_7.0.33-135_amd64.deb
sha:8c0a78115176993c55f75ea9579f8b5b228fe3a6
-
alt-php70-common_7.0.33-135_amd64.deb
sha:b7915f4b5df5a343adf026c898cb021606767ecc
-
alt-php70-dba_7.0.33-135_amd64.deb
sha:a2bd113bf5b91b4694efee0221647706a5dd9536
-
alt-php70-dev_7.0.33-135_amd64.deb
sha:7c77dce177344f096ff5eec3e4dffc63ef5542d0
-
alt-php70-enchant_7.0.33-135_amd64.deb
sha:0ee76a9274dfa0d2464c41988f4d7bc1f44adc60
-
alt-php70-firebird_7.0.33-135_amd64.deb
sha:b2a2a7f6429db7292cd2a3af5c032e4a7a316b87
-
alt-php70-gd_7.0.33-135_amd64.deb
sha:1129f9d635d7d3b302a27f555bb32b3ff8d869b2
-
alt-php70-imap_7.0.33-135_amd64.deb
sha:a9982839c9607072f6e0e0a400fd31db5b6b064e
-
alt-php70-intl_7.0.33-135_amd64.deb
sha:d2048aecf2e68b323fe9d60cbfa4e55aae8ba35e
-
alt-php70-ldap_7.0.33-135_amd64.deb
sha:e20344dc22c2dd1aa056b1a45ef2acd4cbfb7bd7
-
alt-php70-mbstring_7.0.33-135_amd64.deb
sha:fb7d4fc9afca0dc1bc875a0c571cb013ac465a81
-
alt-php70-mcrypt_7.0.33-135_amd64.deb
sha:bdd62937e18a3cbf822fe85ca4ed5b931c86daf9
-
alt-php70-mysqlnd_7.0.33-135_amd64.deb
sha:3aa3c7d31925e2c75388c7cdeb69937253d0be0a
-
alt-php70-odbc_7.0.33-135_amd64.deb
sha:8d9039a44877a6ac0df402a99f8bb7cf30a5f81c
-
alt-php70-opcache_7.0.33-135_amd64.deb
sha:0d58e961ca7c528fdf4f6cc62408f1cec7144453
-
alt-php70-pdo_7.0.33-135_amd64.deb
sha:312f2ae2807923ca4c9aaeebbb67e9318bc0f4ca
-
alt-php70-pgsql_7.0.33-135_amd64.deb
sha:3aeb42aada4194f09b2ffc9d1263d6d534e2efcd
-
alt-php70-php-fpm_7.0.33-135_amd64.deb
sha:756bf8e1ec51f799709a2235974d03a1370d96a6
-
alt-php70-process_7.0.33-135_amd64.deb
sha:67e0fc92278d37722590d1ae31dd6f17eba68a41
-
alt-php70-pspell_7.0.33-135_amd64.deb
sha:21a3bac75474d3da971f10b4970ecbefe9413884
-
alt-php70-recode_7.0.33-135_amd64.deb
sha:4425da1cf34281ea988b21745a98e74f1f8da228
-
alt-php70-snmp_7.0.33-135_amd64.deb
sha:d21b113ccd5a3852ee29e5ea19c01b436bf793d3
-
alt-php70-soap_7.0.33-135_amd64.deb
sha:7d071bd2c7a03eef1e8e2a77260d5afcb6c65e27
-
alt-php70-tidy_7.0.33-135_amd64.deb
sha:5eb22b8c8178507d6a86577b43623f84837ceb11
-
alt-php70-xml_7.0.33-135_amd64.deb
sha:fe79ec0c8953278ae40282235e9a6d66ab885253
-
alt-php70-xmlrpc_7.0.33-135_amd64.deb
sha:69a1f47371e282d2d8502a81782371bb154f1601
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
