सुरक्षा सलाह पर वापस जाएँ

EasyApache 4 25.67 — cPanel & WHM Update

EasyApache 4 25.67 rolls out ea-nginx updates for cPanel & WHM servers. Headline: ted packages for EasyApache 4. This security release updates ea-nginx from v1.31.1 to v1.31.2, addressing two CVEs from the nginx 2026-06-17 advisory: CVE-2026-42055 (Medium: buffer overflow in ngx_http_proxy_v2_module a

High 8.1 CVSS
cPanel

प्रभावित संस्करण

25.67

SharedLicense लाइसेंस के तहत इसका अर्थ

These are shared-hosting stack components (ea-nginx); with a CVSS of 8.1 in the advisory's own data and CWE-122 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Security updates We released updated packages for EasyApache 4. This security release updates ea-nginx from v1.31.1 to v1.31.2, addressing two CVEs from the nginx 2026-06-17 advisory: CVE-2026-42055 (Medium: buffer overflow in ngx_http_proxy_v2_module and ngx_http_grpc_module) and CVE-2026-48142 (Low: buffer over-re…

EasyApache 4 25.67

2026 June 18

Security updates

We released updated packages for EasyApache 4.

This security release updates ea-nginx from v1.31.1 to v1.31.2, addressing two CVEs from the nginx 2026-06-17 advisory: CVE-2026-42055 (Medium: buffer overflow in ngx_http_proxy_v2_module and ngx_http_grpc_module) and CVE-2026-48142 (Low: buffer over-read in ngx_http_charset_module). The associated nginx module packages (ea-nginx-echo, ea-nginx-headers-more, ea-nginx-njs, ea-nginx-passenger, ea-modsec30-connector-nginx) were also rebuilt against the patched version. It also updates ea-nodejs22 from v22.22.3 to v22.23.0, the Node.js June 2026 security release addressing 11 CVEs including two High-severity issues (CVE-2026-48618: TLS wildcard auth bypass; CVE-2026-48933: WebCrypto AES integer overflow crash).

For a full list of changes, read the EasyApache 4 change log.

अक्सर पूछे जाने वाले प्रश्न

What does EasyApache 4 25.67 fix?
ted packages for EasyApache 4. This security release updates ea-nginx from v1.31.1 to v1.31.2, addressing two CVEs from the nginx 2026-06-17 advisory: CVE-2026-42055 (Medium: buffer overflow in ngx_http_proxy_v2_module a
Which packages are involved?
ea-nginx — the EasyApache 4 packaged builds of these components on cPanel & WHM servers.
How do I apply it?
In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें