[CLSA-2026:1784108879] Fix CVE(s): CVE-2026-14355
Type:
security
Severity:
Important
Release date:
2026-07-15 09:48:13 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in openssl_encrypt() with AES key-wrap-with-padding (aes-*-wrap-pad, RFC 5649) - debian/patches/php-7.1-CVE-2026-14355.patch: backport upstream commit cbc0489126 in ext/openssl/openssl.c — reserve an extra EVP_CIPHER_block_size for EVP_CIPH_WRAP_MODE ciphers so the output buffer fits the RFC 5649 roundup(len,8)+8 expansion. - CVE-2026-14355
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-100_amd64.deb
    sha:6fc87fabbe383cfdc1d50cf93516cdf33cbd9706
  • alt-php71-bcmath_7.1.33-100_amd64.deb
    sha:9baea314bfc99dfc2f3cb32aedd63a0d7fae28a6
  • alt-php71-cli_7.1.33-100_amd64.deb
    sha:52923fd615dd8abf7091a628c3943783fb2c2f4d
  • alt-php71-common_7.1.33-100_amd64.deb
    sha:cbcaa2b0d7bc09f43976b6683e9288f717c8eb86
  • alt-php71-dba_7.1.33-100_amd64.deb
    sha:6079cd37c3b98e27e853e6eae16069475de70ea7
  • alt-php71-dev_7.1.33-100_amd64.deb
    sha:4a5af2188892d2162a9ad5bc2171628c51de7e16
  • alt-php71-enchant_7.1.33-100_amd64.deb
    sha:ea52e3cfb84598bf7ec35efd51ce75945e89ee2f
  • alt-php71-firebird_7.1.33-100_amd64.deb
    sha:aadaaef5f126751b71cef9cc91951e2685d0e95b
  • alt-php71-gd_7.1.33-100_amd64.deb
    sha:6cebffeb7c48ecec80b9932a91ce65a0bff9f6a2
  • alt-php71-imap_7.1.33-100_amd64.deb
    sha:dc4807305bacf106616764f5be56e06b9c11b9a3
  • alt-php71-intl_7.1.33-100_amd64.deb
    sha:9f60938902b5aa865b73a5265b3003cc096c931d
  • alt-php71-ldap_7.1.33-100_amd64.deb
    sha:a379d5f897d6ab343e16ac82b8ccc0ddcb01f9d0
  • alt-php71-mbstring_7.1.33-100_amd64.deb
    sha:726ee00d3701649991d5b71346973963ed06f456
  • alt-php71-mcrypt_7.1.33-100_amd64.deb
    sha:54c8c7c37973bd8cb12b8aae2fad395efdcb63b2
  • alt-php71-mysqlnd_7.1.33-100_amd64.deb
    sha:e30d86ec60288c44de3dd12b7b3557009bf00118
  • alt-php71-odbc_7.1.33-100_amd64.deb
    sha:8db83bbbb04e5168ac0c18f9f278c05e92ca510e
  • alt-php71-opcache_7.1.33-100_amd64.deb
    sha:d0898d2ae842a8bdc3a1b40bf480788a5e477965
  • alt-php71-pdo_7.1.33-100_amd64.deb
    sha:2ab75ba7478b9be18e09e3e1d14da5daf64b8807
  • alt-php71-pgsql_7.1.33-100_amd64.deb
    sha:1d0eeff2c5fc49342c541fa37665993c92f3d490
  • alt-php71-php-fpm_7.1.33-100_amd64.deb
    sha:5ae0401d73394f802561a561e6905b797a4ff142
  • alt-php71-process_7.1.33-100_amd64.deb
    sha:a7e21911216fd570a51ba803f8a07a26ed3715bb
  • alt-php71-pspell_7.1.33-100_amd64.deb
    sha:161733c883b0f80af47b536e391bd05dd7fef438
  • alt-php71-recode_7.1.33-100_amd64.deb
    sha:c01bfd7682a5e7fa02b0a7c9e085a2e5f52bb8e7
  • alt-php71-snmp_7.1.33-100_amd64.deb
    sha:5e5e3094873e03e076070c25a4728a05326b4c8b
  • alt-php71-soap_7.1.33-100_amd64.deb
    sha:9c1c472cfe69852792ae632cf3f9873bd0096825
  • alt-php71-tidy_7.1.33-100_amd64.deb
    sha:a1afaea98500d5506293bada8763ac1c01d36deb
  • alt-php71-xml_7.1.33-100_amd64.deb
    sha:0454d2acc8168140d1d3f34837a8fb7c8e4e3f69
  • alt-php71-xmlrpc_7.1.33-100_amd64.deb
    sha:492bf6d823631b34e3d264bcb6d4428ae3b10a6b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.