[CLSA-2026:1778603120] Fix CVE(s): CVE-2026-6735
Type:
security
Severity:
Low
Release date:
2026-05-12 16:25:25 UTC
Description:
* SECURITY UPDATE: XSS in PHP-FPM status endpoint - debian/patches/CVE-2026-6735.patch: HTML-encode proc.request_uri and tighten query_string entity flags in sapi/fpm/fpm/fpm_status.c. - CVE-2026-6735
Updated packages:
  • libapache2-mod-php7.2_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:376e2c11cca53d5424e69c0122bbbe473006ed3f
  • libphp7.2-embed_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:71c18d46cdbbbc7e3481782c028406e5ce7495c2
  • php7.2_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_all.deb
    sha:fed1af0b19ee8061703d9fc718da39c946d2775b
  • php7.2-bcmath_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:3308e7bb94200a6ed5be76d8056271bbe081fa53
  • php7.2-bz2_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:f8ce23d3733a95f7a2932b3b286071c31019fcd8
  • php7.2-cgi_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:f78925158c2d93c616e668b03bbd4a54c978bfe6
  • php7.2-cli_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:eb6fd1634648310ad9793704cadc7e2a7814da90
  • php7.2-common_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:246b620621cc1fc19e2f1925e9b57877c2bcabb5
  • php7.2-curl_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:45ea7ef27ae6cec5ec9aa98cc3193ce6aff89269
  • php7.2-dba_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:2f7d567175cdf62fcec2f3a3240f3881637388bb
  • php7.2-dev_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:dfbdf89f9ed933c4a0a7ad9d0492ba43d94ce0ab
  • php7.2-enchant_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:25f5b8cdf020ea38247a11926c790a29a3cf87ab
  • php7.2-fpm_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:4f7de0c67ab4bf39aaa42a9c65cfd5f063554cda
  • php7.2-gd_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:c03b5e3ac7124b60a283229deb2a0f39b8b78500
  • php7.2-gmp_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:574a29426751964fa21c49389462896e6e58d55b
  • php7.2-imap_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:8ab5397cf400a41a7e2e1199ca00a81583569af4
  • php7.2-interbase_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:6049d36f5f014d510aaa6bfe2eb2d7409303e874
  • php7.2-intl_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:1cd6d02de38311aecd342959be00d36405984bbb
  • php7.2-json_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:edf0f4c01323b5cb2464b772690b266e112d1694
  • php7.2-ldap_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:4a34cfc2cdbe3e2ef9471b5cf19a31a90617ad16
  • php7.2-mbstring_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:92bf4dc54a82ceeb23eced7e0be653c6ce7f52ae
  • php7.2-mysql_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:f37ace6999b2c0b62f4eb9e7fd0a231f00e052c8
  • php7.2-odbc_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:af7968687522481dbb4b00ff2352f5e2f896f9d2
  • php7.2-opcache_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:4a3c576ac1b0814f7d7768eb2b71dc3fc8618c02
  • php7.2-pgsql_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:42a6354031ab5d244bb1cca6e5a37165aa797e66
  • php7.2-phpdbg_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:0d5af2bd15a1ccee30cde927f3782f2835bedb5f
  • php7.2-pspell_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:e34599e047a7ce7121ccaec177919689d58ec3f9
  • php7.2-readline_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:c454240013e255dcb7ee94da19c136a1f3153ed7
  • php7.2-recode_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:dd14d28c5b614fb70737937fa5257d57f71fa69e
  • php7.2-snmp_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:ce21b6f514349c8e81258271666ba9a50b8d58d6
  • php7.2-soap_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:3b3e0c2042d06bc37790d3af0fd22cc66560e89d
  • php7.2-sqlite3_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:595c6b7e929c8195b4d6188c1e7dfccd8ccf7755
  • php7.2-sybase_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:1e41f1b041f34bd23a6fdecb9c80127ddcf72e72
  • php7.2-tidy_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:8a42ad88500ce4d9af89d26dcf34eb2ee3f0f875
  • php7.2-xml_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:0c5991c87775cd81f553ee6908408cd3a0951926
  • php7.2-xmlrpc_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:48a8faf13c8cdbda18112cd07fcd2ff0f642eb8f
  • php7.2-xsl_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_all.deb
    sha:aeb20ebd10a33f2fd430b58a8c16ad10cd2e3672
  • php7.2-zip_7.2.24-0ubuntu0.18.04.17+tuxcare.els14_amd64.deb
    sha:c4b34fe04172eaa76ef030b946725e656a04378b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.