EasyApache 4 25.64 — cPanel & WHM Update
EasyApache 4 25.64 is cPanel & WHM's packaging of ea-apache24 security fixes: We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. Th
Затронутые версии
25.64
Что это значит по лицензии SharedLicense
These are shared-hosting stack components (ea-apache24); with a CVSS of 7.5 in the advisory's own data and CWE-789 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.
Security and maintenance updates We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Not…
EasyApache 4 25.64
2026 June 3
Security and maintenance updates
We released updated packages for EasyApache 4.
This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Note: HTTP/2 is not enabled by default in cPanel configurations.
For a full list of changes, read the EasyApache 4 change log.
Часто задаваемые вопросы
What does EasyApache 4 25.64 fix?
Which packages are involved?
How do I apply it?
Источники
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему