[CLSA-2026:1784039475] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-14 14:31:31 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-pad (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + EVP_CIPHER_block_size, which under-sizes RFC 5649 padded-wrap output and overflows the heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream php-src cbc0489126a7682796aad1e5fb4e51de74af162c).
CVEs fixed:
Updated packages:
  • alt-php70_7.0.33-135_amd64.deb
    sha:595f535741fc2fe1c94eb2473eb4cc60aa855f13
  • alt-php70-bcmath_7.0.33-135_amd64.deb
    sha:21df57854b60e469262d6f25dfa9f27526c63bab
  • alt-php70-cli_7.0.33-135_amd64.deb
    sha:d2d7bf4bf8ef934c97c5791a0e471b7e61bf2d1f
  • alt-php70-common_7.0.33-135_amd64.deb
    sha:5b53f1ebef1ec3c37042117035f6a5ad5b20f90b
  • alt-php70-dba_7.0.33-135_amd64.deb
    sha:a19f6c274663d0dde8250c3a4108e326863af794
  • alt-php70-dev_7.0.33-135_amd64.deb
    sha:b7db26228d358e966e1b5c94a493b83d2efbdbee
  • alt-php70-enchant_7.0.33-135_amd64.deb
    sha:a9de67d0bec39f73f99a4c2798bad08e18e866a3
  • alt-php70-firebird_7.0.33-135_amd64.deb
    sha:13be63e196b930d49795b3c36e2a871dbd8842b7
  • alt-php70-gd_7.0.33-135_amd64.deb
    sha:726d6de0def7f28cb8179c841dc93d7f5d002631
  • alt-php70-imap_7.0.33-135_amd64.deb
    sha:612bf2ef3e2913698df93ee3cd0da2d9a87e7e42
  • alt-php70-intl_7.0.33-135_amd64.deb
    sha:6fca5e8d853e61d0f4b42bf4965c9da528dddc14
  • alt-php70-ldap_7.0.33-135_amd64.deb
    sha:d729191d9bbf9d69e776112207a5897d7ccc7100
  • alt-php70-mbstring_7.0.33-135_amd64.deb
    sha:8ef1c43d69b580b3981f2cdb832f7c5e814bc633
  • alt-php70-mcrypt_7.0.33-135_amd64.deb
    sha:6b62fa3e5021b0b7a4489d515e52bd1ed30eb4b7
  • alt-php70-mysqlnd_7.0.33-135_amd64.deb
    sha:5a8af47d924d6b777fc7a3db767a0c17cf5f7f36
  • alt-php70-odbc_7.0.33-135_amd64.deb
    sha:0de660b78b71cd9bdd29fb67fe297994086c1a0c
  • alt-php70-opcache_7.0.33-135_amd64.deb
    sha:766981e70f773bd915d8887056eb039b61542c9d
  • alt-php70-pdo_7.0.33-135_amd64.deb
    sha:0450091a18e30753cee74a64801c34a3a1586d2e
  • alt-php70-pgsql_7.0.33-135_amd64.deb
    sha:b2c6842a52547d1309512716e01e61cdb96eaf8b
  • alt-php70-php-fpm_7.0.33-135_amd64.deb
    sha:2af45ee35d46b5a0f4ec4c67ef599371541907d9
  • alt-php70-process_7.0.33-135_amd64.deb
    sha:426b1014d537e3c13d40d1cd0d2ce6cee7341a7b
  • alt-php70-pspell_7.0.33-135_amd64.deb
    sha:84d1690b10390b4f6e9e962422184aeb3f92aec0
  • alt-php70-recode_7.0.33-135_amd64.deb
    sha:e7d5bb2b1a5c19de4f62885658840707ffddb216
  • alt-php70-snmp_7.0.33-135_amd64.deb
    sha:48f2999870a105e514cf3949c902f8b5ec8fe7eb
  • alt-php70-soap_7.0.33-135_amd64.deb
    sha:0d91583cbc8c13473333080d9fafd1c94f681377
  • alt-php70-tidy_7.0.33-135_amd64.deb
    sha:f2228d918fdde0126ef0fbdca2e628f535ab077a
  • alt-php70-xml_7.0.33-135_amd64.deb
    sha:748d21e9ed1db76ec669dcae55e9c414f2a31aeb
  • alt-php70-xmlrpc_7.0.33-135_amd64.deb
    sha:c5166bae55f661bddc8e11e97080c7de036418aa
  • alt-php70_7.0.33-135_arm64.deb
    sha:740d289f6e003b09dcf0ced184b0f573bc8fa3e7
  • alt-php70-bcmath_7.0.33-135_arm64.deb
    sha:a3954c82d892aef6ab19d5bd516e7e18e0a72c56
  • alt-php70-cli_7.0.33-135_arm64.deb
    sha:2409351761ad6cd29cfb8adecf0c7f8c0ab084be
  • alt-php70-common_7.0.33-135_arm64.deb
    sha:b932bcb086268573ef8da659f98aeeaaee1ee3e5
  • alt-php70-dba_7.0.33-135_arm64.deb
    sha:02d49953603ea0401970bbb7a5ac8199fca2fcfb
  • alt-php70-dev_7.0.33-135_arm64.deb
    sha:f6e9c53b4abd3d38fc6fff237ff83c82576907d0
  • alt-php70-enchant_7.0.33-135_arm64.deb
    sha:19e495a4d029b5873107bd1ecc526be76863650a
  • alt-php70-firebird_7.0.33-135_arm64.deb
    sha:da8c27233c2c6950393ea1c5edd22471de614a05
  • alt-php70-gd_7.0.33-135_arm64.deb
    sha:3a87136b4ab5eef51c0613500c049f2988674044
  • alt-php70-imap_7.0.33-135_arm64.deb
    sha:69a43d297cabab072540dd1e2a23c606528d4e18
  • alt-php70-intl_7.0.33-135_arm64.deb
    sha:5a522d811ced6a25d846296c9eede6341f940ad6
  • alt-php70-ldap_7.0.33-135_arm64.deb
    sha:d38145169729dc04aa33440b353359cd0403a9dc
  • alt-php70-mbstring_7.0.33-135_arm64.deb
    sha:42e382ec80a627d6b4f1acde0d4a645828283303
  • alt-php70-mcrypt_7.0.33-135_arm64.deb
    sha:db990655c30c6665a300e5ad60b46cbf61c7d1ba
  • alt-php70-mysqlnd_7.0.33-135_arm64.deb
    sha:f786f2e186e4132eb07ac240bc84f4864203e7a5
  • alt-php70-odbc_7.0.33-135_arm64.deb
    sha:bad44816e2381f05a3051d41249b66f3d34bf99b
  • alt-php70-opcache_7.0.33-135_arm64.deb
    sha:e763cb2d4c1c7001600a724e5079903695a2b05c
  • alt-php70-pdo_7.0.33-135_arm64.deb
    sha:297db13026629876906b1180b70578f3dbd4b306
  • alt-php70-pgsql_7.0.33-135_arm64.deb
    sha:8e36693021be513565f54bf0157bc0f5b29bac01
  • alt-php70-php-fpm_7.0.33-135_arm64.deb
    sha:40f82664850398ff82b951000ef92d4e9f541c24
  • alt-php70-process_7.0.33-135_arm64.deb
    sha:0c38d19dfebadafb4178c6082a4220c247e40fa9
  • alt-php70-pspell_7.0.33-135_arm64.deb
    sha:887d46ebf7211972fd76d1a2a906df3e80fbfa99
  • alt-php70-recode_7.0.33-135_arm64.deb
    sha:4e43112331e25286c7e6885da50dcec68f2df9c5
  • alt-php70-snmp_7.0.33-135_arm64.deb
    sha:38a2936353e33b8ed9f7f0fc218e0495af967704
  • alt-php70-soap_7.0.33-135_arm64.deb
    sha:11fefd4507b167448ab9227a73c058d687853e0d
  • alt-php70-tidy_7.0.33-135_arm64.deb
    sha:a932498aed407ac05b4697cf32f39b2c2b2bd126
  • alt-php70-xml_7.0.33-135_arm64.deb
    sha:f47045e6203e748ce08da180bcf6d63f06339209
  • alt-php70-xmlrpc_7.0.33-135_arm64.deb
    sha:6a291f625e62acb8456dc3312c3cdbed2171a88e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.