EasyApache 4 25.77 — cPanel & WHM Update
EasyApache 4 25.77 rolls out ea-php82, ea-php83, ea-php84, ea-php85 updates for cPanel & WHM servers. Headline: We released updated packages for EasyApache 4. This release resolves three PHP vulnerabilities across ea-php82, ea-php83, ea-php84, and ea-php85: a libgd vulnerability (CVE-2026-9672), a SQL injection via backslash break
Affected Versions
25.77
What this means under a SharedLicense license
These are shared-hosting stack components (ea-php82, ea-php83, ea-php84, ea-php85); with a CVSS of in the advisory's own data, unpatched servers stay exposed until WHM's EasyApache update is applied.
Maintenance and Security Release We released updated packages for EasyApache 4. This release resolves three PHP vulnerabilities across ea-php82, ea-php83, ea-php84, and ea-php85: a libgd vulnerability (CVE-2026-9672), a SQL injection via backslash breakout in PGSQL (CVE-2026-17543), and a crash via recursive symlink…
EasyApache 4 25.77
2026 August 5
Maintenance and Security Release
We released updated packages for EasyApache 4.
This release resolves three PHP vulnerabilities across ea-php82, ea-php83, ea-php84, and ea-php85: a libgd vulnerability (CVE-2026-9672), a SQL injection via backslash breakout in PGSQL (CVE-2026-17543), and a crash via recursive symlinks in Phar archives (CVE-2026-7260). ea-php84 and ea-php85 also resolve an out-of-bounds write in bccomp() (CVE-2026-17544). ea-nodejs22 updates to v22.23.2, an upstream Security Release resolving ten CVEs. This release also includes a config rebuild performance fix for ea-nginx and an update to ea-nghttp2 (v1.70.0).
For a full list of changes, read the EasyApache 4 change log.
Frequently Asked Questions
What does EasyApache 4 25.77 fix?
Which packages are involved?
How do I apply it?
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System