Security Advisory: CloudLinux $HTTP_HOST Environment Injection
This is a security release for CloudLinux 7, CloudLinux 9. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
प्रभावित संस्करण
7.4 and earlier
पैच किया गया संस्करण
7.5
डिफ़ॉल्ट अपडेट कमांड
yum update -yसुधार कमांड
CloudLinux 7
yum clean all
yum update cl-lveCloudLinux 9
dnf clean metadata
dnf update cl-lveSharedLicense लाइसेंस के तहत इसका अर्थ
Your SharedLicense license itself is not affected — this is a change in CloudLinux 7, CloudLinux 9 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
A vulnerability in CloudLinux LVE Manager allowed environment variable injection via the $HTTP_HOST header, potentially leading to unauthorized access to protected resources.
संदर्भ
अपने सिस्टम में भेद्यताओं की जाँच करें
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
अपना सिस्टम जाँचें