[CLSA-2026:1784110066] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-15 10:07:59 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap-with-padding (aes-*-wrap-pad, RFC 5649) - debian/patches/php-7.1-CVE-2026-14355.patch: backport upstream commit cbc0489126 in ext/openssl/openssl.c — reserve an extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers so the output buffer fits the RFC 5649 roundup(len,8)+8 expansion. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-100_amd64.deb
    sha:c289ac5304315d0f72d17b45f143bc355a9ee934
  • alt-php71-bcmath_7.1.33-100_amd64.deb
    sha:50f1209e45830ec70fa5b8d33012ea91d8e2c79d
  • alt-php71-cli_7.1.33-100_amd64.deb
    sha:ce71d28003efe35c9f16d17822aa2fd4fb30b559
  • alt-php71-common_7.1.33-100_amd64.deb
    sha:c1734d6786e1f04befaf8c9a5a3965c3889cc4c5
  • alt-php71-dba_7.1.33-100_amd64.deb
    sha:c8f5f0804ea009672d845e5df6d72394d40e9561
  • alt-php71-dev_7.1.33-100_amd64.deb
    sha:16b4acfaa6bc43641f331d89051e8e842b0ecb4e
  • alt-php71-enchant_7.1.33-100_amd64.deb
    sha:e21ec5b2b503be7cb0d3fe1edcceefcf8722ba85
  • alt-php71-firebird_7.1.33-100_amd64.deb
    sha:67ae34d160d823d43030be9e005cb3b468feacf6
  • alt-php71-gd_7.1.33-100_amd64.deb
    sha:b10ee1a7782778139f5945a761d2c394ec88f143
  • alt-php71-imap_7.1.33-100_amd64.deb
    sha:a371d7cd703cb6a67854f014166347bb42627caf
  • alt-php71-intl_7.1.33-100_amd64.deb
    sha:a9c86b73b29fcaad6d88f74e0a46f0be10b1f42f
  • alt-php71-ldap_7.1.33-100_amd64.deb
    sha:2b9d1e3fc5acd3cbbb853e6dd88be3dfc91f1c9d
  • alt-php71-mbstring_7.1.33-100_amd64.deb
    sha:be0a4eb05b01023da8fadd52c601c90984e5fb36
  • alt-php71-mcrypt_7.1.33-100_amd64.deb
    sha:f1690c1fe057c912edefa44e1c66a5f2599d9a9f
  • alt-php71-mysqlnd_7.1.33-100_amd64.deb
    sha:c1437dd4ea22744db7937e1b876914552348db8a
  • alt-php71-odbc_7.1.33-100_amd64.deb
    sha:4dfad7b6be855e96f1e28db9f623765430b799d1
  • alt-php71-opcache_7.1.33-100_amd64.deb
    sha:81b471ab526c5c4be8d08fb55aa02ca385923345
  • alt-php71-pdo_7.1.33-100_amd64.deb
    sha:52656613d015aef04bdb402127669d2fcc299a57
  • alt-php71-pgsql_7.1.33-100_amd64.deb
    sha:3b0aa0359227ac82e71dc4281fa2c0043808f080
  • alt-php71-php-fpm_7.1.33-100_amd64.deb
    sha:d40616b0d017b4e6a1e770273ba2dc2f249435ab
  • alt-php71-process_7.1.33-100_amd64.deb
    sha:4ac4d61b4ad82a437db7cb6e44752f1d8d220185
  • alt-php71-pspell_7.1.33-100_amd64.deb
    sha:a50eccafbc4acbf17e97960b45e4f718f70ab4ae
  • alt-php71-recode_7.1.33-100_amd64.deb
    sha:316ec56b2146d9a03fd6e14b347187133caf3746
  • alt-php71-snmp_7.1.33-100_amd64.deb
    sha:83601f527e11bbd1018b398dd910ca9d9245c1cc
  • alt-php71-soap_7.1.33-100_amd64.deb
    sha:e2bebd398c3b75da3adbc7810f34555a36696606
  • alt-php71-tidy_7.1.33-100_amd64.deb
    sha:395a2cfed8972773e88af29dc22146834417c3f9
  • alt-php71-xml_7.1.33-100_amd64.deb
    sha:3c1a01603178e372b5287351156774046a0c612d
  • alt-php71-xmlrpc_7.1.33-100_amd64.deb
    sha:7054de6b36813d50bd461022d78e63feb25b2ba1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.