Zend Server 2021.4.6

July 26, 2026

Maintenance release, fixing CVE security issues for PHP.

Updated Apache to v.2.4.68 in Zend Server 2021.4.6 Windows installer

Backported CVE fixes

PHP versions 7.4.33.14, 7.3.33.20, 7.2.34.28, 7.1.33.30
OpenSSL:
- Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355) (David Carlier)