Release date:
2026-07-14 16:34:53 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-pad (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + EVP_CIPHER_block_size, which under-sizes RFC 5649 padded-wrap output and overflows the heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream php-src cbc0489126a7682796aad1e5fb4e51de74af162c).
Updated packages:
-
alt-php70_7.0.33-135_amd64.deb
sha:075ae9ba7ba2303ae21e702682a5494de2b9c179
-
alt-php70-bcmath_7.0.33-135_amd64.deb
sha:756324a6bf32a7fb05dbdaba960d09715e616f03
-
alt-php70-cli_7.0.33-135_amd64.deb
sha:5dd393f1d165768b838eb03cf389b52f10e2f8cd
-
alt-php70-common_7.0.33-135_amd64.deb
sha:3267b8eb77513080f4d3521b2f33d927e2419a58
-
alt-php70-dba_7.0.33-135_amd64.deb
sha:9a8e34c248e9f08302adc6c659e78204b67a8ff4
-
alt-php70-dev_7.0.33-135_amd64.deb
sha:03054db8a4a7dac9ddea33338a79425b2d13cb6c
-
alt-php70-enchant_7.0.33-135_amd64.deb
sha:a47ed0a81849ee9d1b185ce3566d11a59bea0737
-
alt-php70-firebird_7.0.33-135_amd64.deb
sha:10ef4d3504d82b2f41b11ff4ce8069aa39fa5570
-
alt-php70-gd_7.0.33-135_amd64.deb
sha:41d5895c6cf50f57c5571c2497d2be517950f7f1
-
alt-php70-imap_7.0.33-135_amd64.deb
sha:1ea108b1d4a4ce3e342c244df1e91deacb69dee1
-
alt-php70-intl_7.0.33-135_amd64.deb
sha:8d301539a9657a82d6d087c3864e6bc444067b8a
-
alt-php70-ldap_7.0.33-135_amd64.deb
sha:1f5be8327afff3ba9399158a794f8ffd4d5bc841
-
alt-php70-mbstring_7.0.33-135_amd64.deb
sha:7b7cc6bd7840ec8f9a9d36f8e6e71a7a2c38ee6c
-
alt-php70-mcrypt_7.0.33-135_amd64.deb
sha:1ed4f416708fd99f31cc4601368fa4fd683e784d
-
alt-php70-mysqlnd_7.0.33-135_amd64.deb
sha:ed1f4c038bfc7a7ed401d4f66e74c06d6541b371
-
alt-php70-odbc_7.0.33-135_amd64.deb
sha:2625a1f939c0202cdecdaa990f46115fac5dd910
-
alt-php70-opcache_7.0.33-135_amd64.deb
sha:5d9c7a4f4e167372ec4f77e83dcbe9ed60f5bf21
-
alt-php70-pdo_7.0.33-135_amd64.deb
sha:b47ce28fee6d5dd192d2cc978677039ada9635ae
-
alt-php70-pgsql_7.0.33-135_amd64.deb
sha:024b8cf41585b8bb2b289d6f8c8c17a2bbac56e6
-
alt-php70-php-fpm_7.0.33-135_amd64.deb
sha:2fadd7f4d1876df1cacde0151f234742efff931f
-
alt-php70-process_7.0.33-135_amd64.deb
sha:bc92b92b5c6b8f0e290e27e7d1bd6c05f0235f3a
-
alt-php70-pspell_7.0.33-135_amd64.deb
sha:9dde9f012e5f45fe414bee025f3f95bd861a05ee
-
alt-php70-recode_7.0.33-135_amd64.deb
sha:6fcd05ac5da7f0db9497b88648117fe77aae355a
-
alt-php70-snmp_7.0.33-135_amd64.deb
sha:46b37bb3c4aae14200108194eb79f791ddd68ed8
-
alt-php70-soap_7.0.33-135_amd64.deb
sha:d457e83026b32c2646efa985443a65d7d69e9d2c
-
alt-php70-tidy_7.0.33-135_amd64.deb
sha:8f23f95a3442134b4aa459b96e8a2763d36ab6fb
-
alt-php70-xml_7.0.33-135_amd64.deb
sha:fea4423cbd68432ff84e13a59f894c9f3a030fa4
-
alt-php70-xmlrpc_7.0.33-135_amd64.deb
sha:de896ce981081661978ea1bd85d1f0b0ae79a004
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
