[CLSA-2026:1784043963] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-14 15:46:20 UTC
Description:
* CVE-2026-14355: openssl_encrypt() heap buffer overflow (zend_mm heap corruption) with AES key-wrap-with-padding (aes-*-wrap-pad) ciphers when built against OpenSSL 3.x; size the output buffer for RFC 5649 padded wrap.
CVEs fixed:
Updated packages:
  • alt-php73_7.3.33-68_amd64.deb
    sha:9acf98537f24a2a83621d28a33303bfd1a31586a
  • alt-php73-bcmath_7.3.33-68_amd64.deb
    sha:1cbabe3fdf3986fe77b67121c7a18c8a4f44589a
  • alt-php73-cli_7.3.33-68_amd64.deb
    sha:d82ba95363cefd0da3bb54b502b7930338585986
  • alt-php73-common_7.3.33-68_amd64.deb
    sha:0366834fc3c570e37a343ca0c40611fc8d5f614f
  • alt-php73-dba_7.3.33-68_amd64.deb
    sha:16548711b52aaacd85154ecc8a8c2711f20fe361
  • alt-php73-dev_7.3.33-68_amd64.deb
    sha:6337e4f5876df3484f6e85e676d06b8a8d38b542
  • alt-php73-enchant_7.3.33-68_amd64.deb
    sha:1cdae58d27a5ecd563d0f6423f4d33effab045df
  • alt-php73-firebird_7.3.33-68_amd64.deb
    sha:70f78ca2337206ccff12aef1680bcf5fda155ec7
  • alt-php73-gd_7.3.33-68_amd64.deb
    sha:339c20ad890ab92956ab88f57ef8e6249d3bf276
  • alt-php73-imap_7.3.33-68_amd64.deb
    sha:4ec1e8fc72cb1cb2d82ca8fbe11be04a8a1e0a11
  • alt-php73-intl_7.3.33-68_amd64.deb
    sha:872d03de4dbb4a8594a1b422202f1b1874032fe5
  • alt-php73-ldap_7.3.33-68_amd64.deb
    sha:cdcca9bdf10c25281654d55d197532677c26e062
  • alt-php73-mbstring_7.3.33-68_amd64.deb
    sha:8c04d9d770f523c1547b6ce56327d4d2dff8e979
  • alt-php73-mysqlnd_7.3.33-68_amd64.deb
    sha:18c62726f3e466410b64eaefc7a10568092681c8
  • alt-php73-odbc_7.3.33-68_amd64.deb
    sha:ec9e2abedb7f60256a008bca231166cfff7289f2
  • alt-php73-opcache_7.3.33-68_amd64.deb
    sha:3a21c11e8f228c9eec4cddee278c9181bb2f950a
  • alt-php73-pdo_7.3.33-68_amd64.deb
    sha:1f8662644c6e827765800211d1f19c61bd3ca09a
  • alt-php73-pgsql_7.3.33-68_amd64.deb
    sha:b4c27481b96789f2ceaa67aae852ac69129bef3d
  • alt-php73-php-fpm_7.3.33-68_amd64.deb
    sha:c709a1c5bc20230ce95acbc84ba72d4c8f9b0cf2
  • alt-php73-process_7.3.33-68_amd64.deb
    sha:705b11bbb77e1dfef15e25cec24b6cb4f407d9a2
  • alt-php73-pspell_7.3.33-68_amd64.deb
    sha:815480a1d0fec9d3704a301f5252d0ffb2075206
  • alt-php73-recode_7.3.33-68_amd64.deb
    sha:7b720b7539f4a708a64da601bcf51ef5223ab79c
  • alt-php73-snmp_7.3.33-68_amd64.deb
    sha:7d8292921ae0633e119072f38799b927279edc2d
  • alt-php73-soap_7.3.33-68_amd64.deb
    sha:fcc7f6857faa93aaedad48baa2d2d3c4d7701928
  • alt-php73-sodium_7.3.33-68_amd64.deb
    sha:7ce34c3bd58e0759d33b65f8f6791cf89f5283bc
  • alt-php73-tidy_7.3.33-68_amd64.deb
    sha:f28da35d159c328d05e83f0983623bda4761144a
  • alt-php73-xml_7.3.33-68_amd64.deb
    sha:8b4b119a36c063fddfc8a5951151356037bed11a
  • alt-php73-xmlrpc_7.3.33-68_amd64.deb
    sha:3abba008260e0e7ff06f89c7c0294a4f0a3cc709
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.