सुरक्षा सलाह पर वापस जाएँ

EasyApache 4 25.64 — cPanel & WHM Update

EasyApache 4 25.64 is cPanel & WHM's packaging of ea-apache24 security fixes: We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. Th

High 7.5 CVSS
cPanel

प्रभावित संस्करण

25.64

SharedLicense लाइसेंस के तहत इसका अर्थ

These are shared-hosting stack components (ea-apache24); with a CVSS of 7.5 in the advisory's own data and CWE-789 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Security and maintenance updates We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Not…

EasyApache 4 25.64

2026 June 3

Security and maintenance updates

We released updated packages for EasyApache 4.

This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Note: HTTP/2 is not enabled by default in cPanel configurations.

For a full list of changes, read the EasyApache 4 change log.

अक्सर पूछे जाने वाले प्रश्न

What does EasyApache 4 25.64 fix?
We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. Th
Which packages are involved?
ea-apache24 — the EasyApache 4 packaged builds of these components on cPanel & WHM servers.
How do I apply it?
In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें