Zend Server 2021.4.7
Included PHP versions: 7.4.33.15, 7.3.33.21, 7.2.34.29, 7.1.33.31
CVE fixes: CVE-2026-9672, CVE-2026-17543, CVE-2026-7260
Changes
- GD
- Upgrade libgd. (CVE-2026-9672) (Pierre Joye)
- PGSQL
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
E'...'backslash breakout). (CVE-2026-17543) (ilutov)
- Fixed GHSA-7qpv-r5mr-78m4 (SQL injection via
- Phar
- Fixed GHSA-vc5h-9ppw-p5f3 (Crash via recursive symlinks). (CVE-2026-7260) (Jakub Zelenka)