[CLSA-2026:1784045670] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-14 16:14:48 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap padding (aes-*-wrap-pad) ciphers - debian/patches/php-8.0-CVE-2026-14355.patch: reserve an extra EVP_CIPHER_block_size() block for EVP_CIPH_WRAP_MODE ciphers in php_openssl_cipher_update() (ext/openssl/openssl.c) so RFC 5649 wrap-with-padding output no longer overflows the zend_string buffer. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-54_amd64.deb
    sha:8f3a6155a0b54b3de37267340a5098bf548bb58c
  • alt-php80-bcmath_8.0.30-54_amd64.deb
    sha:dfc72d1bb2a191d81950b48273ac5c13c82cc9d2
  • alt-php80-cli_8.0.30-54_amd64.deb
    sha:32510091ac25537b8e5ef59ac88701e1d8b448d2
  • alt-php80-common_8.0.30-54_amd64.deb
    sha:b443d614c74a334cbaa6ba5c24085b6ff35d41a2
  • alt-php80-dba_8.0.30-54_amd64.deb
    sha:addb212714f93b4a7f458e33b1972dd2a020f464
  • alt-php80-dev_8.0.30-54_amd64.deb
    sha:9670bd34df5aaee20e50db1633e40ad397643523
  • alt-php80-enchant_8.0.30-54_amd64.deb
    sha:60f8f8befd97b4108550fda7060629ed0f924128
  • alt-php80-firebird_8.0.30-54_amd64.deb
    sha:59e29215c5ee6f04cdeb68cebfafe2a9ba7a6b6c
  • alt-php80-gd_8.0.30-54_amd64.deb
    sha:afdcfac50adce45073f1bb6912b62f548f7d17d1
  • alt-php80-imap_8.0.30-54_amd64.deb
    sha:9306d06b6bf343c339c259eeb9c20a6c9023f016
  • alt-php80-intl_8.0.30-54_amd64.deb
    sha:0121543ebaa8353cdc2959ab0efb90372ed72a5e
  • alt-php80-ldap_8.0.30-54_amd64.deb
    sha:7424a0bbefcbbcd15fa8688bb9b4e0efe47f427a
  • alt-php80-mbstring_8.0.30-54_amd64.deb
    sha:c5cceef0998a028a92c09d19bce5fd734a730ed7
  • alt-php80-mysqlnd_8.0.30-54_amd64.deb
    sha:e7c0885116e81b6f75f380de6df32a5301939459
  • alt-php80-odbc_8.0.30-54_amd64.deb
    sha:d04134156e08325642d5c668ac7ff8c733dcc44f
  • alt-php80-opcache_8.0.30-54_amd64.deb
    sha:8699dc060902582f9727cda82d7041c1c38021b0
  • alt-php80-pdo_8.0.30-54_amd64.deb
    sha:042a0ddd5b9dc112242d245bc7f6e223d6b28184
  • alt-php80-pgsql_8.0.30-54_amd64.deb
    sha:f2edf6ce4e678ee70f8e03343e7a3d3cc2aefda1
  • alt-php80-php-fpm_8.0.30-54_amd64.deb
    sha:8caed2478a32d755b749bf0af110cccd21fce12b
  • alt-php80-process_8.0.30-54_amd64.deb
    sha:3b73b5913d1d8fde7a1f44d872b6bbd20d5027a0
  • alt-php80-pspell_8.0.30-54_amd64.deb
    sha:10710a6f5aa6c32a951feb24ade2e6a13e7dfcd8
  • alt-php80-snmp_8.0.30-54_amd64.deb
    sha:e8ae468e80289d99f286c0eafad73cad49d2dfed
  • alt-php80-soap_8.0.30-54_amd64.deb
    sha:d83052e790133153db75d2b9ccd01f2fe9fa939b
  • alt-php80-sodium_8.0.30-54_amd64.deb
    sha:847498e6c34d66c33f22f9b394f64792283e1e7e
  • alt-php80-tidy_8.0.30-54_amd64.deb
    sha:de94b4d06f313fa96f5be0ddc03f3c32195d2a89
  • alt-php80-xml_8.0.30-54_amd64.deb
    sha:fe1b7aad7cd9f8396bd32571f4122291d6a3212d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.