[CLSA-2026:1784106864] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-15 09:14:38 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap-with-padding (aes-*-wrap-pad, RFC 5649) - debian/patches/php-7.1-CVE-2026-14355.patch: backport upstream commit cbc0489126 in ext/openssl/openssl.c — reserve an extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers so the output buffer fits the RFC 5649 roundup(len,8)+8 expansion. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-100_amd64.deb
    sha:7d7e608a2a4cfd45977ced9eef26b8e373fcdd0a
  • alt-php71-bcmath_7.1.33-100_amd64.deb
    sha:145cb981305859a174136baeb9d7ba33d475eb77
  • alt-php71-cli_7.1.33-100_amd64.deb
    sha:fad97eaa2e94ec9617339dbaef7b9e5964f37b9c
  • alt-php71-common_7.1.33-100_amd64.deb
    sha:06cbc86e7f18376ea272eb7b751dbbc7b615a8d4
  • alt-php71-dba_7.1.33-100_amd64.deb
    sha:1ef4017defe00d287f87c1a3555e92dc7546cf68
  • alt-php71-dev_7.1.33-100_amd64.deb
    sha:6fc6214e377261e7be129c13a51ba0b02b5ccd97
  • alt-php71-enchant_7.1.33-100_amd64.deb
    sha:9e562dd7a913eb822c4bce05340bd07cc04eef41
  • alt-php71-firebird_7.1.33-100_amd64.deb
    sha:b736b2bf2c09fff65a88f92960a1282ba9d070f7
  • alt-php71-gd_7.1.33-100_amd64.deb
    sha:3d8ba46e51b33dec4a3630b0bd080bf66838971a
  • alt-php71-imap_7.1.33-100_amd64.deb
    sha:bd5949e91ff15e97f173146773be481dcf49a3dd
  • alt-php71-intl_7.1.33-100_amd64.deb
    sha:0669481d822bb417cc9938e9a8989ffb7d3aabfa
  • alt-php71-ldap_7.1.33-100_amd64.deb
    sha:7b494c792b3307f7916f010fbb19aeb56ba7fde9
  • alt-php71-mbstring_7.1.33-100_amd64.deb
    sha:2042dad6e68395f89ba313fa1c5d0d27bf49235f
  • alt-php71-mcrypt_7.1.33-100_amd64.deb
    sha:e3240e9d0edbc114a838ca886ed705f7c9673b4a
  • alt-php71-mysqlnd_7.1.33-100_amd64.deb
    sha:c5d94e653835bc05eb82960bf2557b3fd8cdd45e
  • alt-php71-odbc_7.1.33-100_amd64.deb
    sha:2a3721a1815784aa9aebb9053be1e7bc6036db23
  • alt-php71-opcache_7.1.33-100_amd64.deb
    sha:12375bc9c671612ce38b8e179016c4b537bf8763
  • alt-php71-pdo_7.1.33-100_amd64.deb
    sha:c2e2ac8f019ca831765c16cc5ddd229cc69d812c
  • alt-php71-pgsql_7.1.33-100_amd64.deb
    sha:1713f2b763dd9aeb6b0367e1d20db74a974943a8
  • alt-php71-php-fpm_7.1.33-100_amd64.deb
    sha:71837ab2464cd4f5d3d8075c35fa2cc0bdd42828
  • alt-php71-process_7.1.33-100_amd64.deb
    sha:906405f371ccddccf497485aab252754e34fb369
  • alt-php71-pspell_7.1.33-100_amd64.deb
    sha:f8dec7f863171a5180c5ab5184fb42607c0ca4fc
  • alt-php71-recode_7.1.33-100_amd64.deb
    sha:8cc865d280709eb525d135cccf41809861a1f0f4
  • alt-php71-snmp_7.1.33-100_amd64.deb
    sha:6f7d54f7e6fc97c5b432679a378832810e6164f6
  • alt-php71-soap_7.1.33-100_amd64.deb
    sha:17245c3cbaa5b9966f6b35542d2520133c049bf8
  • alt-php71-tidy_7.1.33-100_amd64.deb
    sha:9c7ba86aa4de69c1a41c3a0f9689d27a290e744a
  • alt-php71-xml_7.1.33-100_amd64.deb
    sha:6f5c473e0df1b9e01be92347215a2542c47b575c
  • alt-php71-xmlrpc_7.1.33-100_amd64.deb
    sha:95cce04ea66f4c1aafec04c0777051070ffc60aa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.