EasyApache 4 25.77 — cPanel & WHM Update
EasyApache 4 25.77 rolls out ea-php82, ea-php83, ea-php84, ea-php85 updates for cPanel & WHM servers. Headline: We released updated packages for EasyApache 4. This release resolves three PHP vulnerabilities across ea-php82, ea-php83, ea-php84, and ea-php85: a libgd vulnerability (CVE-2026-9672), a SQL injection via backslash break
Затронутые версии
25.77
Что это значит по лицензии SharedLicense
These are shared-hosting stack components (ea-php82, ea-php83, ea-php84, ea-php85); with a CVSS of in the advisory's own data, unpatched servers stay exposed until WHM's EasyApache update is applied.
Maintenance and Security Release We released updated packages for EasyApache 4. This release resolves three PHP vulnerabilities across ea-php82, ea-php83, ea-php84, and ea-php85: a libgd vulnerability (CVE-2026-9672), a SQL injection via backslash breakout in PGSQL (CVE-2026-17543), and a crash via recursive symlink…
EasyApache 4 25.77
2026 August 5
Maintenance and Security Release
We released updated packages for EasyApache 4.
This release resolves three PHP vulnerabilities across ea-php82, ea-php83, ea-php84, and ea-php85: a libgd vulnerability (CVE-2026-9672), a SQL injection via backslash breakout in PGSQL (CVE-2026-17543), and a crash via recursive symlinks in Phar archives (CVE-2026-7260). ea-php84 and ea-php85 also resolve an out-of-bounds write in bccomp() (CVE-2026-17544). ea-nodejs22 updates to v22.23.2, an upstream Security Release resolving ten CVEs. This release also includes a config rebuild performance fix for ea-nginx and an update to ea-nghttp2 (v1.70.0).
For a full list of changes, read the EasyApache 4 change log.
Часто задаваемые вопросы
What does EasyApache 4 25.77 fix?
Which packages are involved?
How do I apply it?
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему