EasyApache 4 25.64 — cPanel & WHM Update
EasyApache 4 25.64 is cPanel & WHM's packaging of ea-apache24 security fixes: We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. Th
Betroffene Versionen
25.64
Was das unter einer SharedLicense-Lizenz bedeutet
These are shared-hosting stack components (ea-apache24); with a CVSS of 7.5 in the advisory's own data and CWE-789 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.
Security and maintenance updates We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Not…
EasyApache 4 25.64
2026 June 3
Security and maintenance updates
We released updated packages for EasyApache 4.
This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Note: HTTP/2 is not enabled by default in cPanel configurations.
For a full list of changes, read the EasyApache 4 change log.
Häufig gestellte Fragen
What does EasyApache 4 25.64 fix?
Which packages are involved?
How do I apply it?
Referenzen
System auf Schwachstellen prüfen
Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.
System prüfen