[CLSA-2026:1784109664] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-15 10:01:17 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap-with-padding (aes-*-wrap-pad, RFC 5649) - debian/patches/php-7.1-CVE-2026-14355.patch: backport upstream commit cbc0489126 in ext/openssl/openssl.c — reserve an extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers so the output buffer fits the RFC 5649 roundup(len,8)+8 expansion. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-100_amd64.deb
    sha:b85100d001f9f39abe5f6fa70b1d3188121b5e82
  • alt-php71-bcmath_7.1.33-100_amd64.deb
    sha:a9a71a6719e37d5b80d2d9adfa228c891a798910
  • alt-php71-cli_7.1.33-100_amd64.deb
    sha:c12a17a198d9e53dff4c5c4e130e662111289d83
  • alt-php71-common_7.1.33-100_amd64.deb
    sha:ad1fdec471baddda0127cc01894beff64a917220
  • alt-php71-dba_7.1.33-100_amd64.deb
    sha:7fb411f34f8ae4804891f9d2ef9ed31271a39dcc
  • alt-php71-dev_7.1.33-100_amd64.deb
    sha:0f2ad04427cdf690cb58e6c3aa3ffd4f9b564b9e
  • alt-php71-enchant_7.1.33-100_amd64.deb
    sha:a54259ebccb437b4b4ed6a0eb0b4ba2d7261f03b
  • alt-php71-firebird_7.1.33-100_amd64.deb
    sha:b65890ca0dd087382c7f027244bd7899f8893130
  • alt-php71-gd_7.1.33-100_amd64.deb
    sha:3afd5b876fccf53952ec3dc3724f784ee1351ac2
  • alt-php71-imap_7.1.33-100_amd64.deb
    sha:809157b9c860b9cd6c5ee5d8b951774152bc7247
  • alt-php71-intl_7.1.33-100_amd64.deb
    sha:9e2ad8efc7b0f379facaab35d2e05b49f55d328e
  • alt-php71-ldap_7.1.33-100_amd64.deb
    sha:846d619983d26a45ce8e69aaf501ca6218a5ece4
  • alt-php71-mbstring_7.1.33-100_amd64.deb
    sha:a8b204deac1fbdb43e17d3a2b11230cd6d35d7cd
  • alt-php71-mcrypt_7.1.33-100_amd64.deb
    sha:9e2ea50e0e3f58a4e8f6268343feb564dafbd5f7
  • alt-php71-mysqlnd_7.1.33-100_amd64.deb
    sha:717cff7c218342f198676cca17dce02995f56876
  • alt-php71-odbc_7.1.33-100_amd64.deb
    sha:9bfa991c3abc537d193275b86d4da9e081572987
  • alt-php71-opcache_7.1.33-100_amd64.deb
    sha:17ba46863012460d158114cfae3ecdaba14d4ae3
  • alt-php71-pdo_7.1.33-100_amd64.deb
    sha:f5c6adc787af0d0aa494a7c47243bce4427284d0
  • alt-php71-pgsql_7.1.33-100_amd64.deb
    sha:5126e9e9bd854d3bfd5947b235f5606d4fafeaa4
  • alt-php71-php-fpm_7.1.33-100_amd64.deb
    sha:9e40b5a650fa2a792f17e9c9392906dec221cb42
  • alt-php71-process_7.1.33-100_amd64.deb
    sha:3cd0c4f61b8614feef71905282121df61c160a9e
  • alt-php71-pspell_7.1.33-100_amd64.deb
    sha:defd1126876666bf3b954ac7b0d2bac140ad6b04
  • alt-php71-recode_7.1.33-100_amd64.deb
    sha:2ce8795768a395a73d1d90297167919e7f8dc6e4
  • alt-php71-snmp_7.1.33-100_amd64.deb
    sha:964960078935c1052dc54f548edb74980538b0e6
  • alt-php71-soap_7.1.33-100_amd64.deb
    sha:07d16740a2297d50a8350e33dbda3065f653ad19
  • alt-php71-tidy_7.1.33-100_amd64.deb
    sha:bb07d584879b6372cbe0a4410a9bfffed6f28a03
  • alt-php71-xml_7.1.33-100_amd64.deb
    sha:245ea7744a0b4886c001f03fb66cd798edc33f51
  • alt-php71-xmlrpc_7.1.33-100_amd64.deb
    sha:b27191f090018cd92d36cf4914e7b1ee0719d1f2
  • alt-php71_7.1.33-100_arm64.deb
    sha:5be94e1789a34b68f8af40c6154c66254bf8aaec
  • alt-php71-bcmath_7.1.33-100_arm64.deb
    sha:dcf2e961239004fbcad63ddffce742c933ee277a
  • alt-php71-cli_7.1.33-100_arm64.deb
    sha:82db030af49fb3bc22e833c2e746e36014b6a366
  • alt-php71-common_7.1.33-100_arm64.deb
    sha:4c61168192bad2b3f3dd45040fc489b7ec4323e8
  • alt-php71-dba_7.1.33-100_arm64.deb
    sha:585b932b4b1d6f70ef0b5950df61a154e2967c29
  • alt-php71-dev_7.1.33-100_arm64.deb
    sha:0e1948db5d3c09d85a44520483df7441c6d5943e
  • alt-php71-enchant_7.1.33-100_arm64.deb
    sha:3905f056f2fcf4b5cac5dd38e3dde1d1f9a38853
  • alt-php71-firebird_7.1.33-100_arm64.deb
    sha:ad4e9d440571ab9f58c417b09811014bf7f0bce8
  • alt-php71-gd_7.1.33-100_arm64.deb
    sha:2f80dd0d1f58a1b8871ffd52473ebf1089aaba5e
  • alt-php71-imap_7.1.33-100_arm64.deb
    sha:f073b5791497846f42ce43c4cec43ca3955d4031
  • alt-php71-intl_7.1.33-100_arm64.deb
    sha:e9f86e479e46c1325d5b71476ad6516ec5a25448
  • alt-php71-ldap_7.1.33-100_arm64.deb
    sha:262d04de83488aefe940c1412d6744a8c5e13a82
  • alt-php71-mbstring_7.1.33-100_arm64.deb
    sha:0cddf2a03ec7d11940d8167aceeb784a8b2cb367
  • alt-php71-mcrypt_7.1.33-100_arm64.deb
    sha:71a76fc7a968cb15787dc9b0dd1d8270bad9cdb2
  • alt-php71-mysqlnd_7.1.33-100_arm64.deb
    sha:b86b6c2a5398ca5b56b3a00aa7b1b05cdf37904a
  • alt-php71-odbc_7.1.33-100_arm64.deb
    sha:f6264280a7c45dec357c7a39c4bfff2681adcfd4
  • alt-php71-opcache_7.1.33-100_arm64.deb
    sha:6c9a570272fa44cec23f5e0676674175fd8ca7aa
  • alt-php71-pdo_7.1.33-100_arm64.deb
    sha:0f1aeb0d98b18145ff925e9ca8d044bf15e891b9
  • alt-php71-pgsql_7.1.33-100_arm64.deb
    sha:218635611e912fda52797f24d2f6af9c501e6ca5
  • alt-php71-php-fpm_7.1.33-100_arm64.deb
    sha:ff5bb644621e6218e1535708de4bc05df6fe8de1
  • alt-php71-process_7.1.33-100_arm64.deb
    sha:61dd52447ff073186ade118150fc101dd6ffd550
  • alt-php71-pspell_7.1.33-100_arm64.deb
    sha:71aa009f65eff398751384a281a3776a0feafc4b
  • alt-php71-recode_7.1.33-100_arm64.deb
    sha:38c636b11c1a0c9b0669bbf32c70a9617de87aa0
  • alt-php71-snmp_7.1.33-100_arm64.deb
    sha:9d1014eb343e4aee107d7ec8753232f054350149
  • alt-php71-soap_7.1.33-100_arm64.deb
    sha:8951e33b6c95968949d1aecec1aae582670a022d
  • alt-php71-tidy_7.1.33-100_arm64.deb
    sha:367145ff0f6d5aa73470b607026ead4709328ed2
  • alt-php71-xml_7.1.33-100_arm64.deb
    sha:e4b889a5bad36f00bd9998d9a8f75e5df86c349b
  • alt-php71-xmlrpc_7.1.33-100_arm64.deb
    sha:d029c45138d4e5980a1d3ae2e40be22d5916889d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.