Release date:
2026-07-14 08:32:37 UTC
Description:
- CVE-2026-14355: openssl_encrypt() heap buffer overflow on AES key-wrap with
padding (aes-*-wrap-pad, EVP_CIPH_WRAP_MODE). php_openssl_cipher_update() sized
the output buffer as data_len + one cipher block, undersizing it for RFC 5649
padded wrap output (roundup(data_len, 8) + 8) and overflowing the zend_mm heap
under OpenSSL 3.x. Reserve one extra block for wrap-mode ciphers. Backport of
upstream php-src commit cbc0489126a7682796aad1e5fb4e51de74af162c (GH-22187).
Updated packages:
-
alt-php81-8.1.34-24.el8.x86_64.rpm
sha:6c5fa6a8e2d7b3adf176b5233c2f06e623a9799d781ddd848c10f043c83e91b7
-
alt-php81-bcmath-8.1.34-24.el8.x86_64.rpm
sha:08e12df641a3303962b3b18d87337e0a9ce905b333b8ccd8d8c88e85c56058e2
-
alt-php81-cli-8.1.34-24.el8.x86_64.rpm
sha:ea5dcbc6d3d5b85c26827d89b22be6c097c6f619297957f73ebfd1f67362ae4a
-
alt-php81-common-8.1.34-24.el8.x86_64.rpm
sha:05d3911f4c4dfc312a7e1784798a7a3a9935d0f807c20c68787ae187f0fc310b
-
alt-php81-dba-8.1.34-24.el8.x86_64.rpm
sha:a2efe5d89024aee3f3be50f13fd95db92a8210247c50119498a8cf9725a262bd
-
alt-php81-devel-8.1.34-24.el8.x86_64.rpm
sha:279b3448acffe075c597fdd851a3bf21d36c9c1a26d9f1d18b3729cbe0327f4d
-
alt-php81-enchant-8.1.34-24.el8.x86_64.rpm
sha:1431e6c051ebec55d31f092fecf089c21724cfe75d366587970d3376c3cb8416
-
alt-php81-firebird-8.1.34-24.el8.x86_64.rpm
sha:93b9bb87215ffc0b57544403f3be8dbbbe9bfe54dfe3568a432572044ae4ce92
-
alt-php81-gd-8.1.34-24.el8.x86_64.rpm
sha:a595a56c98c34f1f12ae9d0e2b28763204589b8be99d8e74b41f4681d373ce3b
-
alt-php81-gmp-8.1.34-24.el8.x86_64.rpm
sha:628cde12c02752899c7dbbfab29fbd39e7b9448e6c57e122c0210c38be0c6d15
-
alt-php81-imap-8.1.34-24.el8.x86_64.rpm
sha:eaa1c4ab625910d0fa3916da644cbe28333fbfcc928328f6e6b10b81bb0d798e
-
alt-php81-intl-8.1.34-24.el8.x86_64.rpm
sha:7904158369f5c88b98d5d435cc530a2196fe278ca07df74835b672c571adb94c
-
alt-php81-ldap-8.1.34-24.el8.x86_64.rpm
sha:4e1faca423ca928cfd71a1df028ace1b2c710d71fa18872826112286b57e48c3
-
alt-php81-mbstring-8.1.34-24.el8.x86_64.rpm
sha:f63ce054538db66fbfb6e9f9fba211cf95c12ee29bd48f24965e3266f0031c70
-
alt-php81-mysqlnd-8.1.34-24.el8.x86_64.rpm
sha:666dd09b94c87b70d31867f94595bb4f038779777667f5a890e75447d6b026c2
-
alt-php81-odbc-8.1.34-24.el8.x86_64.rpm
sha:f56486be7791a6a208e8378ecc3c00d2e9ca722ede866b42f7ff361d53e6dc13
-
alt-php81-opcache-8.1.34-24.el8.x86_64.rpm
sha:17a2e261ec70aad5b9fb5f096362c08d28d0aae2dba2119464acd1c2d40cc733
-
alt-php81-pdo-8.1.34-24.el8.x86_64.rpm
sha:77b81155f4917080a495e931e45dd51edf5f2d16d3df7736878b61c54bfe4aae
-
alt-php81-pgsql-8.1.34-24.el8.x86_64.rpm
sha:f7df94ea86a4ed1fd4b379a1dc78a16924157fe35649cc9d50a1f6923951271f
-
alt-php81-php-fpm-8.1.34-24.el8.x86_64.rpm
sha:dda1eb38ad5b0ba0c1adcdf8f02f37acc271effb87790890abb213be75a4089f
-
alt-php81-process-8.1.34-24.el8.x86_64.rpm
sha:caab5425f36f5bc83647fb8328029832cc5e15b0803fc3ccf7d7ecd619d85d3a
-
alt-php81-pspell-8.1.34-24.el8.x86_64.rpm
sha:0b16dd01b03b356380887d761b19afc7fb5c5c25dddfdad7703f5b73ba2bdac5
-
alt-php81-snmp-8.1.34-24.el8.x86_64.rpm
sha:1aafea921dea90d258278024ed614b7ee1f7538994956de71d079e01d8c8811f
-
alt-php81-soap-8.1.34-24.el8.x86_64.rpm
sha:5b9b5f820bf55243740e330b4873bc693f30b29053a23e0386f9dc350e8d7bf1
-
alt-php81-sodium-8.1.34-24.el8.x86_64.rpm
sha:41f8abed5ff344875b260a9fd40dee4e21318d24288224b9c693bce20d86daa8
-
alt-php81-tidy-8.1.34-24.el8.x86_64.rpm
sha:c4d04817f8a57d2b8c167bd95740600aaacabf36bf9dd29884e4274a52baca22
-
alt-php81-xml-8.1.34-24.el8.x86_64.rpm
sha:a881702aeca5ed6b158a4dddd0705ce3914a0666d3b156e17fd19ae471fb7e32
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
