Back to Security Advisories

EasyApache 4 25.66 — cPanel & WHM Update

EasyApache 4 25.66 is cPanel & WHM's packaging of ea-openssl11 security fixes: We released updated packages for EasyApache 4. This security and maintenance release patches ea-openssl11 to 1.1.1w-8 (CentOS 7 only) with TuxCare/ELS backports addressing five CVEs including four High-severity issues (C

High 8.8 CVSS
cPanel CentOS 7

Affected Versions

25.66

What this means under a SharedLicense license

These are shared-hosting stack components (ea-openssl11); with a CVSS of 8.8 in the advisory's own data and CWE-416 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Security and maintenance updates We released updated packages for EasyApache 4. This security and maintenance release patches ea-openssl11 to 1.1.1w-8 (CentOS 7 only) with TuxCare/ELS backports addressing five CVEs including four High-severity issues (CVE-2026-45447, CVE-2026-34180, CVE-2026-7383, CVE-2026-9076). It…

EasyApache 4 25.66

2026 June 17

Security and maintenance updates

We released updated packages for EasyApache 4.

This security and maintenance release patches ea-openssl11 to 1.1.1w-8 (CentOS 7 only) with TuxCare/ELS backports addressing five CVEs including four High-severity issues (CVE-2026-45447, CVE-2026-34180, CVE-2026-7383, CVE-2026-9076). It also updates the Passenger ecosystem (ea-passenger-src, ea-apache24-mod-passenger, ea-nginx-passenger, ea-ruby27-passenger) to v6.1.5.

For a full list of changes, read the EasyApache 4 change log.

Frequently Asked Questions

What does EasyApache 4 25.66 fix?
We released updated packages for EasyApache 4. This security and maintenance release patches ea-openssl11 to 1.1.1w-8 (CentOS 7 only) with TuxCare/ELS backports addressing five CVEs including four High-severity issues (C
Which packages are involved?
ea-openssl11 — the EasyApache 4 packaged builds of these components on cPanel & WHM servers.
How do I apply it?
In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

References

Security Advisories

Related Advisories

ConfigServer Security & Firewall (CSF) 16.35-1 — cPanel & WHM Update

2026-11-09

ConfigServer Security & Firewall (CSF) 16.34-1 — cPanel & WHM Update

2026-11-02

PHP Security Release – CVE-2026-115560

2026-10-24

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System