Volver a los avisos de seguridad

EasyApache 4 25.82 — cPanel & WHM Update

EasyApache 4 release 25.82 is a security update that bumps ea-libxml2 to 2.15.4, fixing eight libxml2 vulnerabilities (CVE-2026-86137 through CVE-2026-86144), patches two resolv flaws in ea-ruby27-ruby (CVE-2026-80212 and CVE-2026-80213), and updates ea-nginx to 1.31.5. The low aggregate CVSS (2.9) reflects mostly minor issues, but the package refresh is still worth applying.

High 2.9 CVSS
cPanel

Versiones afectadas

25.82

Lo que esto significa bajo una licencia de SharedLicense

The libxml2 batch — including an out-of-bounds read (CWE-125) — consists of mostly low-severity parsing flaws, but libxml2 underpins many PHP-facing XML workloads, so exposure is broad even when individual impact is small.

EasyApache 4 25.82

2026 September 9

Security and maintenance updates

We released updated packages for EasyApache 4.

This security release updates ea-libxml2 to 2.15.4, which fixes eight vulnerabilities
(CVE-2026-86137, CVE-2026-86138, CVE-2026-86139, CVE-2026-86140, CVE-2026-86141, CVE-2026-86142,
CVE-2026-86143 and CVE-2026-86144), and patches ea-ruby27-ruby for two vulnerabilities in resolv
(CVE-2026-80212 and CVE-2026-80213). It also updates ea-nginx to 1.31.5 with rebuilds of the
nginx modules, and adds ea-podman compatibility with CageFS 7.6.39.

For a full list of changes, read the EasyApache 4 change log.

Preguntas frecuentes

Which CVEs does EasyApache 4 25.82 fix?
Eight libxml2 vulnerabilities (CVE-2026-86137, -86138, -86139, -86140, -86141, -86142, -86143 and -86144) via ea-libxml2 2.15.4, plus two resolv flaws in ea-ruby27-ruby (CVE-2026-80212 and CVE-2026-80213).
How severe are the libxml2 issues in 25.82?
Individually low — the aggregate CVSS for the release is 2.9 and one flaw is an out-of-bounds read (CWE-125). Low severity is not a reason to skip: libxml2 processes untrusted XML across many applications.
How do I update?
Run yum update 'ea-*' or use WHM → EasyApache 4 → Update. Release 25.82 (September 9, 2026) also adds ea-podman compatibility with CageFS 7.6.39.
Does ea-nginx need a separate update?
No — 25.82 updates ea-nginx to 1.31.5 with rebuilt nginx modules as part of the same package refresh.

Referencias

Avisos de seguridad

Avisos relacionados

EasyApache 4 25.86 — cPanel & WHM Update

2026-10-01

ConfigServer Security & Firewall (CSF) 16.32-1 — cPanel & WHM Update

2026-09-30

Sitejet Builder 4.13.1-1 — cPanel & WHM Update

2026-09-30

Comprueba tu sistema en busca de vulnerabilidades

Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.

Comprueba tu sistema