Advisories » MGASA-2026-0274

Updated php packages fix a security vulnerability

Publication date: 20 Jul 2026
Modification date: 20 Jul 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-14355

Description

The updated php packages fix a security issue:
Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with
AES-WRAP-PAD. (CVE-2026-14355)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35807
• https://www.php.net/ChangeLog-8.php#8.2.32
• https://www.cve.org/CVERecord?id=CVE-2026-14355

SRPMS

9/core

• php-8.2.32-1.mga9