Release date:
2026-07-14 09:17:09 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with
padding (aes-*-wrap-pad, EVP_CIPH_WRAP_MODE). php_openssl_cipher_update() sized
the output buffer as data_len + one cipher block, undersizing it for RFC 5649
padded wrap output (roundup(data_len, 8) + 8) and overflowing the zend_mm heap
under OpenSSL 3.x. Reserve one extra block for wrap-mode ciphers. Backport of
upstream php-src commit cbc0489126a7682796aad1e5fb4e51de74af162c (GH-22187).
Updated packages:
-
alt-php81-8.1.34-24.el6.x86_64.rpm
sha:14e23e1567e3d1d36ae7b6bd92f2f123d3f626e9105c0fc9a10d5c8d1a83a4d7
-
alt-php81-bcmath-8.1.34-24.el6.x86_64.rpm
sha:8e31d205621465bcb356f3fc2b344843f805632e1009648d75624d2ece8e4016
-
alt-php81-cli-8.1.34-24.el6.x86_64.rpm
sha:f6d61d27729f88c71faa9e480fef66c8485a47c59f3492a02d26de35ebca9057
-
alt-php81-common-8.1.34-24.el6.x86_64.rpm
sha:972017d3834a36616606bf5c84586e36621a5137f1de05e23aa52dba15802e17
-
alt-php81-dba-8.1.34-24.el6.x86_64.rpm
sha:19908732ee6dbdeaedb72632fd22c77d8d9f4d8b07ef96625e650a73fd4e27c3
-
alt-php81-devel-8.1.34-24.el6.x86_64.rpm
sha:0d7b928ae96be3ecf097e7b4ebc0ee56b87946fa3ed42d6e65d85243e611e006
-
alt-php81-enchant-8.1.34-24.el6.x86_64.rpm
sha:fa0aee799a891b90fab1c0bc2c17a3badcdebe00f181e5c95e4d08afb535732f
-
alt-php81-firebird-8.1.34-24.el6.x86_64.rpm
sha:8e0867c3c92a3a97dcbdb1e0378f8bcc02fec1f1ddb7c6938631c5bd7086d85f
-
alt-php81-gd-8.1.34-24.el6.x86_64.rpm
sha:24ed9415e8ba8558f8928de1f0caae1529d71ee9e28a449bc757024b71bc1f25
-
alt-php81-gmp-8.1.34-24.el6.x86_64.rpm
sha:a6b633f829d101e9c06d4990c3070188e325868fe9cb5c05eae82613c67f52b5
-
alt-php81-imap-8.1.34-24.el6.x86_64.rpm
sha:a20220eb8a21bde187298f43b092483bef9965fd8de86c0821b683974631cff9
-
alt-php81-intl-8.1.34-24.el6.x86_64.rpm
sha:8e9c4bf1b9968f822fae41b287bb5fe7b4e84f1690f58fae421a122bd7ba6e15
-
alt-php81-ldap-8.1.34-24.el6.x86_64.rpm
sha:41968c1074b2375d8e5e83b0f804fb2ebab88a7353b36f1f8aadaf08cc5d28d2
-
alt-php81-mbstring-8.1.34-24.el6.x86_64.rpm
sha:27812167a0395ebd8337a67a10a658e19b3a87ad33e0f8e6f894835230224677
-
alt-php81-mysqlnd-8.1.34-24.el6.x86_64.rpm
sha:52d07c473ec319655600d4cc252f0aaaa06e78fcb4f7fd2bf4042899db8eacaf
-
alt-php81-odbc-8.1.34-24.el6.x86_64.rpm
sha:e28bcef4b4d1e2fd7f962d7060ac65de03c45e1a198b6d3851be161acfbe74ed
-
alt-php81-opcache-8.1.34-24.el6.x86_64.rpm
sha:d28818ee3c4bab78711cff1a99f8bc30261cda0116823e96d1bbf43fa3888719
-
alt-php81-pdo-8.1.34-24.el6.x86_64.rpm
sha:a39408169cd7d5b295785e845035387683ee20eefb960a68cb42a8844c9f8dfa
-
alt-php81-pgsql-8.1.34-24.el6.x86_64.rpm
sha:5d31aa3ab511911f0f3c524269c711e3f76aa135670b1b73a204beefd5af3b24
-
alt-php81-php-fpm-8.1.34-24.el6.x86_64.rpm
sha:337327329f9cfb5f642e4beded1054b23913fcf7e64683312c9a9196031bec1a
-
alt-php81-process-8.1.34-24.el6.x86_64.rpm
sha:306827bcd62b42aae20505affb9f43d5dd5bffce2bc139f8aa4004060f65bd10
-
alt-php81-pspell-8.1.34-24.el6.x86_64.rpm
sha:aeb25fa62b195258af683e6cd14262bd70d3ebf07ecded5f7b0cf0fd4853b21d
-
alt-php81-snmp-8.1.34-24.el6.x86_64.rpm
sha:0d2b5d598d717c3e42a44646a4e07f7230d7000eeeccbab60e732919e4846897
-
alt-php81-soap-8.1.34-24.el6.x86_64.rpm
sha:46857b5f8431a10ae5310e8b82e1707d96176db15141b054aeb6ab741746fbb6
-
alt-php81-sodium-8.1.34-24.el6.x86_64.rpm
sha:03c746c226a5812ea1964b1d5ebd525c550140a13d29b73412cbed8eb7724e7b
-
alt-php81-tidy-8.1.34-24.el6.x86_64.rpm
sha:abaef39aa3397e851d1c8b1e139bb094aae69c85a1f7f22a4c8a5c13cf9bbb3e
-
alt-php81-xml-8.1.34-24.el6.x86_64.rpm
sha:5f5811256ca559b68e4a98ebe3069082dd039372ae6eb19f959966e831a41538
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
