Security Advisory: cPanel / CSF Plugin
This is a security release for cPanel & WHM. Update the product on every affected server to the patched release — `sudo /scripts/upcp --force` — there is no workaround, and unpatched servers remain exposed until updated.
Betroffene Versionen
16.20-1 and earlier
Gepatchte Version
16.30-1
Standard-Update-Befehl
yum update -yFix-Befehle
CentOS 7 / CloudLinux 7
yum clean all
/scripts/update-packagesAlmaLinux / CloudLinux 8/9/10
dnf clean metadata
/scripts/update-packagesWas das unter einer SharedLicense-Lizenz bedeutet
Your SharedLicense license itself is not affected — this is a change in cPanel & WHM software, not in licensing. Apply it on every affected server: sudo /scripts/upcp --force. Licenses keep working through updates; nothing needs re-issuing or re-activating.
Multiple vulnerabilities were found in the ConfigServer Firewall (CSF) plugin. Exploiting the vulnerabilities could allow an attacker to gain root access.
Referenzen
System auf Schwachstellen prüfen
Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.
System prüfen