[CLSA-2026:1780513989] php: Fix of CVE-2026-6735
Type:
security
Severity:
Moderate
Release date:
2026-06-03 19:13:21 UTC
Description:
- CVE-2026-6735: XSS in PHP-FPM status endpoint via unescaped request URI rendered in HTML and XML output formats
CVEs fixed:
Updated packages:
  • php-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:e9d4187b6b66d435728295ad2f7b7d7ee1a0c89ea99a271b3c8de6635056c7f2
  • php-bcmath-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:f5d287b83bed21ed0248345c516d336d777ad450cea24068a3d99a504f78572d
  • php-cli-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:0f00069f8b5276f7f2051b6c98828c5daf987a879384d3989a634e7935b1dc50
  • php-common-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:958ec3567b4e90acf1b6117f0f4cb3bc03587931986bd6eea647b755ce4d8a25
  • php-dba-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:14be6adbc2e5932247822aab05fa7e7f52e7b8741ee27c6920fca8b69643c109
  • php-dbg-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:45afaf152676924d50116efedcf1eee9019990952d48cf8a072cbc7632022010
  • php-devel-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:cc758abb98e6e06a2166af930cc4e1ecaf129bef593f92cb4658557187813d1b
  • php-embedded-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:f5c1468dbd31e23b0e4b9d83baaad64ce78b113e936c7cde8f6fac15936df22d
  • php-enchant-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:d7878bade2f6e98c626790a21d692ecfd50db7f5c8ec0afa384298fb06905877
  • php-ffi-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:b6798a38dff49270c4178b493e295a1f8c35c2456c71d6bef1b2e7a417d108f1
  • php-fpm-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:7505f871ff1c39a981b8c4cee232989d12a52e7024fea1004610cc2f3ab7186e
  • php-gd-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:0f0df964007e02abf6463b8a81d9c3d29f8c6402986392a1c1e3c21dad9bfa85
  • php-gmp-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:0e555a6cf239ad654ee6b54a3ae092315ff7a852297507a24cf6030d15862f0a
  • php-intl-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:50a41f4d82262c4b6bfa0735309a501ce571e388c1d1aac7e3e8ee885d4f9393
  • php-ldap-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:fc0a7ed4d533d8f46251cd2947edbb551a2bb6d411c921addf60f5c981da99cd
  • php-mbstring-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:0b83f29fe720ce7f4ff4f0e553623dd1e203ec0913c589115632fba67b1eb101
  • php-mysqlnd-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:909a696abe2574ed0deea7452ea914155fa409e1df5837aa309ffe1ace82f40f
  • php-odbc-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:b8877af7111ac6a7ec9e431504fe06c16304e52285111697790310e168c4d57d
  • php-opcache-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:25d9e410bfc9a7cdc576ed7e73aedad98fd4276b2613070ef94edcafe9e76efe
  • php-pdo-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:4caa32cc36341310a3021b30e00334ed537d48a9f18094b86fc734fd3d3c2f8b
  • php-pgsql-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:89a6fbe4343c33f315243eccefa4cba394eda76e8ef3af7ab457a4492eb13831
  • php-process-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:e1a202f485627bafb1ef9cbfd0d4623c13c60872fd5bfe716adc7a7410fde12b
  • php-snmp-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:bb3c0e985ec25d3aa7e2daf242c135d8ba5612158a8c985dbdb1c827734919a4
  • php-soap-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:5add4b93e90d4d5d364120fd8b6f4d70a26d198098a3b916a1ea0f6fd085e8a2
  • php-xml-8.0.30-3.el9_6.tuxcare.els4.x86_64.rpm
    sha:93743406546fb29ead29bcec80ecb62c8803743846722ab15bce3956bc510455
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.