Security Advisory: cPanel / CSF Plugin
This is a security release for cPanel & WHM. Update the product on every affected server to the patched release — `sudo /scripts/upcp --force` — there is no workaround, and unpatched servers remain exposed until updated.
Versiones afectadas
16.20-1 and earlier
Versión parcheada
16.30-1
CMD de actualización por defecto
yum update -yComandos de corrección
CentOS 7 / CloudLinux 7
yum clean all
/scripts/update-packagesAlmaLinux / CloudLinux 8/9/10
dnf clean metadata
/scripts/update-packagesLo que esto significa bajo una licencia de SharedLicense
Your SharedLicense license itself is not affected — this is a change in cPanel & WHM software, not in licensing. Apply it on every affected server: sudo /scripts/upcp --force. Licenses keep working through updates; nothing needs re-issuing or re-activating.
Multiple vulnerabilities were found in the ConfigServer Firewall (CSF) plugin. Exploiting the vulnerabilities could allow an attacker to gain root access.
Referencias
Comprueba tu sistema en busca de vulnerabilidades
Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.
Comprueba tu sistema