[CLSA-2026:1784048927] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-14 17:09:03 UTC
Description:
* CVE-2026-14355: fix openssl_encrypt() heap buffer overflow with AES key-wrap-pad (aes-*-wrap-pad) ciphers. The output buffer was sized as data_len + EVP_CIPHER_block_size, which under-sizes RFC 5649 padded-wrap output and overflows the heap when built against OpenSSL 3.x. Reserve an extra block for EVP_CIPH_WRAP_MODE ciphers (backport of upstream php-src cbc0489126a7682796aad1e5fb4e51de74af162c).
CVEs fixed:
Updated packages:
  • alt-php70_7.0.33-135_amd64.deb
    sha:bf354f0e7df8005657777a4620e8a166c240bad4
  • alt-php70-bcmath_7.0.33-135_amd64.deb
    sha:f2b37b2d20293be5251465ef151c66a2d645038f
  • alt-php70-cli_7.0.33-135_amd64.deb
    sha:656535fb418baeb05bcc03d1df6c074da36268dd
  • alt-php70-common_7.0.33-135_amd64.deb
    sha:e84b1dbb3e731f0546c9f8952288753e217cdce8
  • alt-php70-dba_7.0.33-135_amd64.deb
    sha:153d77c41a171879fc9b40fa1f3ba075b48d290a
  • alt-php70-dev_7.0.33-135_amd64.deb
    sha:ed5f5634dc7c5e18271961efd6af5c9ed142aba1
  • alt-php70-enchant_7.0.33-135_amd64.deb
    sha:98fb49a351f6a79a1ac978da6fad9b779744196f
  • alt-php70-firebird_7.0.33-135_amd64.deb
    sha:b077a3c022de290667780ce497b2213745288a1e
  • alt-php70-gd_7.0.33-135_amd64.deb
    sha:5e759564902d97b1440dac6f33dcc155da1ae33d
  • alt-php70-imap_7.0.33-135_amd64.deb
    sha:5d825569c922aa5cbe1b48fa25c16c38a41af246
  • alt-php70-intl_7.0.33-135_amd64.deb
    sha:4d7dc37b286f4714a14f605ce82c67e5eff83a49
  • alt-php70-ldap_7.0.33-135_amd64.deb
    sha:78e78c63728177b8f416293646592c346fe1dde7
  • alt-php70-mbstring_7.0.33-135_amd64.deb
    sha:ea70548cec2c66648818c3892df5a7dd90da6d3b
  • alt-php70-mcrypt_7.0.33-135_amd64.deb
    sha:95ddbdfac67bb0ae44b55747396131a2661b8336
  • alt-php70-mysqlnd_7.0.33-135_amd64.deb
    sha:5193b234e0903319403fa9825d5bc67b3f1f8361
  • alt-php70-odbc_7.0.33-135_amd64.deb
    sha:731ee53b37090e68cf40e0f97240143e8df2f3ba
  • alt-php70-opcache_7.0.33-135_amd64.deb
    sha:8754e4799f45450794f131064eaeea6831baec04
  • alt-php70-pdo_7.0.33-135_amd64.deb
    sha:12028f6f3c5002b79d0fe0a942b90691a3e308b3
  • alt-php70-pgsql_7.0.33-135_amd64.deb
    sha:2918c00089bde5eee038335c1f563dc44bf4bdf3
  • alt-php70-php-fpm_7.0.33-135_amd64.deb
    sha:f00623d8e49400740487b51555a2ba3333e40c31
  • alt-php70-process_7.0.33-135_amd64.deb
    sha:d9fb4598b55854e70682e829f54bc609c2793ce3
  • alt-php70-pspell_7.0.33-135_amd64.deb
    sha:f74a0255856d066b6074b29245cab8950c77e7d6
  • alt-php70-recode_7.0.33-135_amd64.deb
    sha:9574e5260d881e77015aa899bf0f2a32604be112
  • alt-php70-snmp_7.0.33-135_amd64.deb
    sha:9d7608cdb30c559007607bd420ef97d22314946b
  • alt-php70-soap_7.0.33-135_amd64.deb
    sha:c723265f2fe8c5c74735f384fbc4a272ac6946b0
  • alt-php70-tidy_7.0.33-135_amd64.deb
    sha:111337ad500f2ff69959f00ee2f604d5098abee7
  • alt-php70-xml_7.0.33-135_amd64.deb
    sha:bb8eff72584a04af20c99afe722bf105a5e83c06
  • alt-php70-xmlrpc_7.0.33-135_amd64.deb
    sha:c74ce88e63cd05ebe7faa3e33faf2d3d8e965e19
  • alt-php70_7.0.33-135_arm64.deb
    sha:370ea12f595b232393247025fcf26174002f5fc0
  • alt-php70-bcmath_7.0.33-135_arm64.deb
    sha:583e4636984b6faaaf419b42a517850e1742485c
  • alt-php70-cli_7.0.33-135_arm64.deb
    sha:1d33882ff23696defef254975c7b39ea4b1142c2
  • alt-php70-common_7.0.33-135_arm64.deb
    sha:7f3affe1d2fcbae03e3d853ab32301dbf9a8cf0c
  • alt-php70-dba_7.0.33-135_arm64.deb
    sha:2547f5a378dbe523554504d2109bc3054492604b
  • alt-php70-dev_7.0.33-135_arm64.deb
    sha:19970cfb14fb7802bc625e3c917d83bfba4b5b9e
  • alt-php70-enchant_7.0.33-135_arm64.deb
    sha:feb7e67e382a9a3f605480a0cbddf15f636833da
  • alt-php70-firebird_7.0.33-135_arm64.deb
    sha:a91bc5ef5ff6439ec8de2694af2824861d2ae57d
  • alt-php70-gd_7.0.33-135_arm64.deb
    sha:abad0e08a009c15030f24f189b5234d445dbc844
  • alt-php70-imap_7.0.33-135_arm64.deb
    sha:162d4c0376bf1065a935de77bfa32c0240d1549c
  • alt-php70-intl_7.0.33-135_arm64.deb
    sha:02d09a2adcf69301aac3e1eb3980da7da0cbb0b0
  • alt-php70-ldap_7.0.33-135_arm64.deb
    sha:09cd7cca0ac428f088049903442e485a66c14949
  • alt-php70-mbstring_7.0.33-135_arm64.deb
    sha:59dc76cc55fd372e455189cdc7475ca43b342524
  • alt-php70-mcrypt_7.0.33-135_arm64.deb
    sha:77c30d52d3cc6ac722d47cc8304085e4a03b615b
  • alt-php70-mysqlnd_7.0.33-135_arm64.deb
    sha:a57c9247ce789f7f2933ce2a43538daa050ad4bf
  • alt-php70-odbc_7.0.33-135_arm64.deb
    sha:fbc0065ad719b6949eb193130c35f546b622f51e
  • alt-php70-opcache_7.0.33-135_arm64.deb
    sha:a6f63e520b954824dfd777437c3a9b6df77a4829
  • alt-php70-pdo_7.0.33-135_arm64.deb
    sha:cd208a192795dba0ee05b2d96320d0f073766b0a
  • alt-php70-pgsql_7.0.33-135_arm64.deb
    sha:2b4d6eb4b266a611da85bf68cfd1468384296cca
  • alt-php70-php-fpm_7.0.33-135_arm64.deb
    sha:3395812bf289003e09f9bb4f1d395c3f003bb4c7
  • alt-php70-process_7.0.33-135_arm64.deb
    sha:0d50ea632a908203446ff2bc185b1ea6e187fc80
  • alt-php70-pspell_7.0.33-135_arm64.deb
    sha:14b82bbaff5f9c611f839f50c5666840b440244d
  • alt-php70-recode_7.0.33-135_arm64.deb
    sha:17b8a6c5b58ba3cf85a32cd768b6fae9e04b8b39
  • alt-php70-snmp_7.0.33-135_arm64.deb
    sha:7a62a39c80762353e79967e5994fba2297aac00e
  • alt-php70-soap_7.0.33-135_arm64.deb
    sha:c826ce21b68f253553693e4673736fa98b32f457
  • alt-php70-tidy_7.0.33-135_arm64.deb
    sha:f1e68a7cfe5163853d5d2ba8397c644d00c9b248
  • alt-php70-xml_7.0.33-135_arm64.deb
    sha:3d8acfe14991cee58b3b54fbc44a334add6154a5
  • alt-php70-xmlrpc_7.0.33-135_arm64.deb
    sha:e9b8aa00131dc182311e1b74e9475e03cb3024b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.