Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-14355: PHP: ext/openssl: Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-12184: PHP: Failure to setup TLS with a remote server can result in a remote DoS
Fixed packages 60
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | php8.3 | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-bcmath | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-bcmath-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-cli | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-cli-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-common | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-common-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-dba | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-dba-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-dbg | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-dbg-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-debugsource | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-devel | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-embedded | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-embedded-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-enchant | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-enchant-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-ffi | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-ffi-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-fpm | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-fpm-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-gd | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-gd-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-gmp | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-gmp-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-intl | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-intl-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-ldap | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-ldap-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-mbstring | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-mbstring-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-modphp | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-modphp-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-mysqlnd | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-mysqlnd-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-odbc | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-odbc-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-opcache | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-opcache-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-pdo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-pdo-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-pgsql | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-pgsql-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-process | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-process-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-pspell | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-pspell-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-snmp | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-snmp-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-soap | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-soap-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-sodium | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-sodium-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-tidy | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-tidy-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-xml | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-xml-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-zip | 0:8.3.32-1.amzn2023.0.1 |
| Amazon Linux · 2023 | php8.3-zip-debuginfo | 0:8.3.32-1.amzn2023.0.1 |
Vulnerabilities 1
-
Medium 5.6
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation …