[CLSA-2026:1778687453] Fix CVE(s): CVE-2026-6735
Type:
security
Severity:
Moderate
Release date:
2026-05-13 15:50:58 UTC
Description:
* SECURITY UPDATE: XSS in PHP-FPM status endpoint - debian/patches/CVE-2026-6735.patch: HTML-encode proc.request_uri and tighten query_string entity flags in sapi/fpm/fpm/fpm_status.c. - CVE-2026-6735
Updated packages:
  • libapache2-mod-php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:11f49ead48a73bb2ca2b7916096953c8296cd45d
  • libphp7.0-embed_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:da7f552509adfbf02e0f611157f1cb13c668bb47
  • php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_all.deb
    sha:901cc95004cfea29ad15d132fe4801811b733f4a
  • php7.0-bcmath_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:525397a8eb081ee01c5aed1212117c17e794a454
  • php7.0-bz2_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:3e3c97ca4074cbfc1ef11b0bc3b68a145b47dec0
  • php7.0-cgi_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:6479eea878d9de3cf553ba5e45753285e605d3a3
  • php7.0-cli_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:fa1eab77cb7b887a0c2270963890220fc1782ee0
  • php7.0-common_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:2d71d785b8acb5a8e6b0ef7062090d4cbf48dbd4
  • php7.0-curl_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:d0808588490eb2ac917a88ef03b067289f8f6d21
  • php7.0-dba_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:0002a27a015748e0d9f9184c052b2cea1b2b8b40
  • php7.0-dev_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:79d2da94c4eb70be77ce9a16595a030301b1bdbb
  • php7.0-enchant_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:9e837ebb32ac43271fae2a731607306462bcaef7
  • php7.0-fpm_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:ff965c992487e7820f6d74086d6bd1f4fda868d3
  • php7.0-gd_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:0f611ba13a92a8bc663660d83c3971f40119f185
  • php7.0-gmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:736ab293df1b82361cca8e9cfbfca853c01f97ca
  • php7.0-imap_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:38d426a553eb7f11c2cc896e08f50159875285c7
  • php7.0-interbase_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:1bc21366a32de075db99f5558c1884f232862b3b
  • php7.0-intl_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:8a98b6ce53969b65d27a7ae6c972de10a7307daf
  • php7.0-json_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:a508927b04165622e1d232ce543de7fa03896308
  • php7.0-ldap_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:7af40b26b286f3c475fb55f62c7d82c054b1cab3
  • php7.0-mbstring_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:316a9e83ace60f51a2b22375cd44f7c4aab9625b
  • php7.0-mcrypt_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:6257e42b78d68e8b5eebe715a378aeccab015d0b
  • php7.0-mysql_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:e3c06b6c964a23134f83d0904e8b2c2784cf0b99
  • php7.0-odbc_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:71962d494c1e6eb58ba437fcac69e89200bb62e9
  • php7.0-opcache_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:9bd343044960251090bb05b4166059d4cb15dbf3
  • php7.0-pgsql_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:839af424d292cd6c1f99ca5c82964be9b747de91
  • php7.0-phpdbg_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:60f4b96c28d04d4dbf8b4eaa2326b81f4f4b906e
  • php7.0-pspell_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:cc97836dcacf5f84ce7b07de0c69bb7b807254b4
  • php7.0-readline_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:7bfcc38bd7200e6a58d518799bf99be67cf3cf19
  • php7.0-recode_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:c96f8f4ed8c73b944a65ae576b19018a02931055
  • php7.0-snmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:8c292d46df75332df25f6e6e5bb0ebc82e595ada
  • php7.0-soap_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:a42c5cfc6e40bdc70ef9eeef406d7a0ce061c840
  • php7.0-sqlite3_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:4da98c43099ba93a3fff708b156610b65f46b630
  • php7.0-sybase_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:38237e78f68d341c0396e96c0804f9c076fb8717
  • php7.0-tidy_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:ecdebdf371efad660125feae5d97ade5b7a3538c
  • php7.0-xml_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:1a16c60fd0e350633a353315add979915dd8feb0
  • php7.0-xmlrpc_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:391328c5c6f2a26f97f060c52c6a4cc886ae834a
  • php7.0-xsl_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_all.deb
    sha:e258105374af71fb8d8ddc2c99b7296d4a5508ef
  • php7.0-zip_7.0.33-0ubuntu0.16.04.17+tuxcare.els21_amd64.deb
    sha:7fb5a8ff44d4b0f1711941a84564fb9e8bbd4818
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.