EasyApache 4 25.64 — cPanel & WHM Update
EasyApache 4 25.64 is cPanel & WHM's packaging of ea-apache24 security fixes: We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. Th
Etkilenen Sürümler
25.64
SharedLicense lisansı altında bunun anlamı
These are shared-hosting stack components (ea-apache24); with a CVSS of 7.5 in the advisory's own data and CWE-789 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.
Security and maintenance updates We released updated packages for EasyApache 4. This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Not…
EasyApache 4 25.64
2026 June 3
Security and maintenance updates
We released updated packages for EasyApache 4.
This security release patches CVE-2026-49975 in ea-apache24. Attackers can craft malicious HTTP/2 cookie headers that multiply across streams, consuming excessive memory. The fix makes cookie headers count against LimitRequestFields. Note: HTTP/2 is not enabled by default in cPanel configurations.
For a full list of changes, read the EasyApache 4 change log.
Sıkça Sorulan Sorular
What does EasyApache 4 25.64 fix?
Which packages are involved?
How do I apply it?
Referanslar
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin