सुरक्षा सलाह पर वापस जाएँ

EasyApache 4 25.70 — cPanel & WHM Update

EasyApache 4 25.70 is cPanel & WHM's packaging of security fixes: CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.

High 5.6 CVSS
cPanel

प्रभावित संस्करण

25.70

SharedLicense लाइसेंस के तहत इसका अर्थ

These are shared-hosting stack components (); with a CVSS of 5.6 in the advisory's own data and CWE-122 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Security and maintenance updates We released updated packages for EasyApache 4. This security release updates PHP 8.2, 8.3, 8.4, and 8.5 to address CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.3, CVE-2026-12184 (a TLS setup failure leading to remote DoS). It also upd…

EasyApache 4 25.70

2026 July 8

Security and maintenance updates

We released updated packages for EasyApache 4.

This security release updates PHP 8.2, 8.3, 8.4, and 8.5 to address CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.3, CVE-2026-12184 (a TLS setup failure leading to remote DoS). It also updates ea-libcurl to backport 13 CVEs from the curl 8.21.0 security advisory.

For a full list of changes, read the EasyApache 4 change log.

अक्सर पूछे जाने वाले प्रश्न

What does EasyApache 4 25.70 fix?
CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.
Which packages are involved?
— the EasyApache 4 packaged builds of these components on cPanel & WHM servers.
How do I apply it?
In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

अपने सिस्टम में भेद्यताओं की जाँच करें

अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।

अपना सिस्टम जाँचें