Zurück zu den Sicherheitshinweisen

EasyApache 4 25.52 — cPanel & WHM Update

EasyApache 4 25.52 is cPanel & WHM's packaging of ea-nghttp2, ea-nginx, ea-nodejs20, ea-nodejs22 security fixes: We released updated packages for EasyApache 4. This security and maintenance release addresses 6 CVEs in ea-nginx 1.29.7, 7 CVEs in ea-nodejs22 and ea-nodejs20, and 1 CVE in ea-nghttp2 (CVE-2026-27135). It also includes

High 7.5 CVSS
cPanel

Betroffene Versionen

25.52

Was das unter einer SharedLicense-Lizenz bedeutet

These are shared-hosting stack components (ea-nghttp2, ea-nginx, ea-nodejs20, ea-nodejs22); with a CVSS of 7.5 in the advisory's own data and CWE-617 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Security and maintenance updates We released updated packages for EasyApache 4. This security and maintenance release addresses 6 CVEs in ea-nginx 1.29.7, 7 CVEs in ea-nodejs22 and ea-nodejs20, and 1 CVE in ea-nghttp2 (CVE-2026-27135). It also includes a proxy configuration fix for Apache 2.4.64+ compatibility, ngin…

EasyApache 4 25.52

2026 April 1

Security and maintenance updates

We released updated packages for EasyApache 4.

This security and maintenance release addresses 6 CVEs in ea-nginx 1.29.7, 7 CVEs in ea-nodejs22 and ea-nodejs20, and 1 CVE in ea-nghttp2 (CVE-2026-27135). It also includes a proxy configuration fix for Apache 2.4.64+ compatibility, nginx module rebuilds, and version updates for ea-libxml2, ea-re2c, ea-tomcat101, and PHP memcached extensions.

For a full list of changes, read the EasyApache 4 change log.

Häufig gestellte Fragen

What does EasyApache 4 25.52 fix?
We released updated packages for EasyApache 4. This security and maintenance release addresses 6 CVEs in ea-nginx 1.29.7, 7 CVEs in ea-nodejs22 and ea-nodejs20, and 1 CVE in ea-nghttp2 (CVE-2026-27135). It also includes
Which packages are involved?
ea-nghttp2, ea-nginx, ea-nodejs20, ea-nodejs22 — the EasyApache 4 packaged builds of these components on cPanel & WHM servers.
How do I apply it?
In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

Referenzen

Sicherheitshinweise

Verwandte Warnhinweise

ConfigServer Security & Firewall (CSF) 16.35-1 — cPanel & WHM Update

2026-11-09

ConfigServer Security & Firewall (CSF) 16.34-1 — cPanel & WHM Update

2026-11-02

PHP Security Release – CVE-2026-115560

2026-10-24

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen