[CLSA-2026:1784107286] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-15 09:21:39 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap-with-padding (aes-*-wrap-pad, RFC 5649) - debian/patches/php-7.1-CVE-2026-14355.patch: backport upstream commit cbc0489126 in ext/openssl/openssl.c — reserve an extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers so the output buffer fits the RFC 5649 roundup(len,8)+8 expansion. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-100_amd64.deb
    sha:b85100d001f9f39abe5f6fa70b1d3188121b5e82
  • alt-php71-bcmath_7.1.33-100_amd64.deb
    sha:cd3d853e73ca417a29e22ea4f537fb3128f751a6
  • alt-php71-cli_7.1.33-100_amd64.deb
    sha:d3e55c8668aa8e148782ab45d6ad8b510688c2d0
  • alt-php71-common_7.1.33-100_amd64.deb
    sha:d7517b94e06b525434961cd9f8b721ad99b3565a
  • alt-php71-dba_7.1.33-100_amd64.deb
    sha:ced1b7b92fd4ac24c041f5d59711d73ce0e125d5
  • alt-php71-dev_7.1.33-100_amd64.deb
    sha:743d566d563f1ef8a81b5aeb3460cf7b2dbbed4c
  • alt-php71-enchant_7.1.33-100_amd64.deb
    sha:76af89351ce3946004fe429ab5d02af95f55cf77
  • alt-php71-firebird_7.1.33-100_amd64.deb
    sha:08366cf4a275f509523a531bb34e19c20f603e77
  • alt-php71-gd_7.1.33-100_amd64.deb
    sha:564dc2af8828f52bfd3a37a87630a859b9d39727
  • alt-php71-imap_7.1.33-100_amd64.deb
    sha:98cda37beb09848dd12552249cde9df17f09328d
  • alt-php71-intl_7.1.33-100_amd64.deb
    sha:9729c00f5eb211d539e56ed835393e35071cfb74
  • alt-php71-ldap_7.1.33-100_amd64.deb
    sha:8b7b866defda74fefdd9c15bb5c007475322daab
  • alt-php71-mbstring_7.1.33-100_amd64.deb
    sha:04072350fd5e11a60bdfa185a8bb8b5eb2c41b05
  • alt-php71-mcrypt_7.1.33-100_amd64.deb
    sha:7f9ddaecaa548c4f9785fabe6de3ac9155866057
  • alt-php71-mysqlnd_7.1.33-100_amd64.deb
    sha:9d9cac2345e2e8c843fc7f25fab00942b545719b
  • alt-php71-odbc_7.1.33-100_amd64.deb
    sha:6012f3a3030850ed97dbb15754a3f904f8e07c0e
  • alt-php71-opcache_7.1.33-100_amd64.deb
    sha:6e5c9042d7767ae84d875e9c0f716750d760f2e6
  • alt-php71-pdo_7.1.33-100_amd64.deb
    sha:960b959f336569bd340df808edadb7569e2067e6
  • alt-php71-pgsql_7.1.33-100_amd64.deb
    sha:f257f4af521037bcdce9ac4d95b9dd7e604d5f5c
  • alt-php71-php-fpm_7.1.33-100_amd64.deb
    sha:c666048881733b25e32a7329472c021cb81792f9
  • alt-php71-process_7.1.33-100_amd64.deb
    sha:fd0310e18d7bcbd13f1727d4d57d4e191fef93c6
  • alt-php71-pspell_7.1.33-100_amd64.deb
    sha:5e10f66421a631bf9dcca6a0b549d756b46ac5bd
  • alt-php71-recode_7.1.33-100_amd64.deb
    sha:1a96d2c59463f05f0697133b3a348b9cec73f134
  • alt-php71-snmp_7.1.33-100_amd64.deb
    sha:a651148de4921db4b6fe8c83505b8964727e5356
  • alt-php71-soap_7.1.33-100_amd64.deb
    sha:81c80870c37023323d65d234cfd4070fef72a70f
  • alt-php71-tidy_7.1.33-100_amd64.deb
    sha:4d19cde39f6d7a81aca30197f2f97cfe70aa5d44
  • alt-php71-xml_7.1.33-100_amd64.deb
    sha:5c83ba9baa1149d33006568c3e1c45b65f3b48af
  • alt-php71-xmlrpc_7.1.33-100_amd64.deb
    sha:0fe494c71f8c508259968c5ba57c3f49fb74a27f
  • alt-php71_7.1.33-100_arm64.deb
    sha:5be94e1789a34b68f8af40c6154c66254bf8aaec
  • alt-php71-bcmath_7.1.33-100_arm64.deb
    sha:574ae5284f2ea36bccea55fc7d6b4b6467f9a161
  • alt-php71-cli_7.1.33-100_arm64.deb
    sha:8cfc522c44188333bc7e697c0db144b11308f2d1
  • alt-php71-common_7.1.33-100_arm64.deb
    sha:e81328982b228553435670e76fa2bbbc0d599ada
  • alt-php71-dba_7.1.33-100_arm64.deb
    sha:909e713fa74919e31642fc1928cde0a7d7df6847
  • alt-php71-dev_7.1.33-100_arm64.deb
    sha:033935fdf985af99ae4511c85d0cb313938cf0b3
  • alt-php71-enchant_7.1.33-100_arm64.deb
    sha:9292574a73dcf4670cd20ad2b9a113d09f3109df
  • alt-php71-firebird_7.1.33-100_arm64.deb
    sha:0a4a8c1347ae3b7f5604c78e9218cf57736bff1e
  • alt-php71-gd_7.1.33-100_arm64.deb
    sha:fd741524a9a9dd1e05eefe2356863edb403cf1ec
  • alt-php71-imap_7.1.33-100_arm64.deb
    sha:b34e9e8c67de00edf558618a18c1e2b5ed6826d7
  • alt-php71-intl_7.1.33-100_arm64.deb
    sha:d3d5635171e85f4ac460bf4e548306d47e2d3076
  • alt-php71-ldap_7.1.33-100_arm64.deb
    sha:988e5bf92ab96d81460f93d07ecbaefb8f21cd39
  • alt-php71-mbstring_7.1.33-100_arm64.deb
    sha:39e573eb5140e4c087043c9ed2582bee1b8a1632
  • alt-php71-mcrypt_7.1.33-100_arm64.deb
    sha:bee216e6182e55d0cdea17ea0005b7db936ae869
  • alt-php71-mysqlnd_7.1.33-100_arm64.deb
    sha:4f3e95a679ec35c6924644172bce7c6542cdbdc0
  • alt-php71-odbc_7.1.33-100_arm64.deb
    sha:2d906e28e989ea97ae1f0d8dbc5c8d92ce6ff3e7
  • alt-php71-opcache_7.1.33-100_arm64.deb
    sha:31f24f1fcdb8250227292a2b8567e7b590d25529
  • alt-php71-pdo_7.1.33-100_arm64.deb
    sha:d641b9f4d5d2034f49c9046ce3caf239dc097e83
  • alt-php71-pgsql_7.1.33-100_arm64.deb
    sha:a383bdbf8eb31e2d722523fbf6b1f5649f383394
  • alt-php71-php-fpm_7.1.33-100_arm64.deb
    sha:3f5f17ad37dfa2c2f8041da9b673fbf6fee7baf0
  • alt-php71-process_7.1.33-100_arm64.deb
    sha:c1782d285ca7b2e414f6b4bb483c68d503ebe071
  • alt-php71-pspell_7.1.33-100_arm64.deb
    sha:84651ffc6ba3d3db23d140d4d5e7e8eba4998f63
  • alt-php71-recode_7.1.33-100_arm64.deb
    sha:c8fc3130187d3d15be9c6956bf35ec0fcd37e5f6
  • alt-php71-snmp_7.1.33-100_arm64.deb
    sha:a33007dc4c2fce63f4dff27f575c48f7d0423a3a
  • alt-php71-soap_7.1.33-100_arm64.deb
    sha:7a176ea7170fdee53291080a412a015f3bddddca
  • alt-php71-tidy_7.1.33-100_arm64.deb
    sha:41ad60259ef2dbb06e1e63c9bcb5bb6630fb263c
  • alt-php71-xml_7.1.33-100_arm64.deb
    sha:65566eed7ddfc29476554ceee7a52fb972925a58
  • alt-php71-xmlrpc_7.1.33-100_arm64.deb
    sha:debd9bfbe5b38ceb105c0f246a40907fb343de99
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.