Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-14355: PHP: ext/openssl: Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
Fixed packages 56
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | php8.5 | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-bcmath | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-bcmath-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-cli | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-cli-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-common | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-common-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-dba | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-dba-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-dbg | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-dbg-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-debugsource | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-devel | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-embedded | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-embedded-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-enchant | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-enchant-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-ffi | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-ffi-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-fpm | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-fpm-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-gd | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-gd-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-gmp | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-gmp-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-intl | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-intl-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-ldap | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-ldap-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-mbstring | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-mbstring-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-modphp | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-modphp-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-mysqlnd | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-mysqlnd-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-odbc | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-odbc-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-pdo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-pdo-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-pgsql | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-pgsql-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-process | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-process-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-snmp | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-snmp-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-soap | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-soap-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-sodium | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-sodium-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-tidy | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-tidy-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-xml | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-xml-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-zip | 0:8.5.8-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.5-zip-debuginfo | 0:8.5.8-1.amzn2023.0.1 |
Vulnerabilities 1
-
Medium 5.6
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-14355.html