Güvenlik Danışarlıklarına Dön

EasyApache 4 25.70 — cPanel & WHM Update

EasyApache 4 25.70 is cPanel & WHM's packaging of security fixes: CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.

High 5.6 CVSS
cPanel

Etkilenen Sürümler

25.70

SharedLicense lisansı altında bunun anlamı

These are shared-hosting stack components (); with a CVSS of 5.6 in the advisory's own data and CWE-122 classed flaws, unpatched servers stay exposed until WHM's EasyApache update is applied.

Security and maintenance updates We released updated packages for EasyApache 4. This security release updates PHP 8.2, 8.3, 8.4, and 8.5 to address CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.3, CVE-2026-12184 (a TLS setup failure leading to remote DoS). It also upd…

EasyApache 4 25.70

2026 July 8

Security and maintenance updates

We released updated packages for EasyApache 4.

This security release updates PHP 8.2, 8.3, 8.4, and 8.5 to address CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.3, CVE-2026-12184 (a TLS setup failure leading to remote DoS). It also updates ea-libcurl to backport 13 CVEs from the curl 8.21.0 security advisory.

For a full list of changes, read the EasyApache 4 change log.

Sıkça Sorulan Sorular

What does EasyApache 4 25.70 fix?
CVE-2026-14355 (a memory corruption issue in openssl_encrypt with AES-WRAP-PAD) and, for PHP 8.
Which packages are involved?
— the EasyApache 4 packaged builds of these components on cPanel & WHM servers.
How do I apply it?
In WHM, open EasyApache 4 and update the profile (or run the package update on the server); Apache/PHP restarts as part of it.

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin