We are happy to announce that cPanel, L.L.C. has released an update for EasyApache 4! Take a look at some highlights below, and then join us on the cPanel Community Forums, Discord, or Reddit to talk about this update and much more. If you have additional questions, feel free to reach out on one of our social channels.

2021-11-23

ea-nginx

scl-php73

scl-php73-meta

ea-php74

ea-php74-meta

ea-php80

ea-php80-meta

mod_security2

ea-tomcat85

This release includes a security patch that has been issued a fix for a CVE (Common Vulnerabilities and Exposures), the details of which are included below.

SUMMARY
cPanel, L.L.C. has updated packages for EasyApache 4 with PHP versions 8.0.13, 7.4.26, and 7.3.33. This release addresses vulnerabilities related to CVE-2021-21707. We strongly encourage all PHP 8.0 users to upgrade to version 8.0.13, all PHP 7.4 users to upgrade to version 7.4.26, and all PHP 7.3 users to upgrade to version 7.3.33.

AFFECTED VERSIONS
All versions of PHP 8.0 through 8.0.12.
All versions of PHP 7.4 through 7.4.25.
All versions of PHP 7.3 through 7.3.32.

SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:

cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system.

SEC-592

Summary

Arbitrary code execution via install_locallib_loginprofile script.

Security Rating

cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system.

cPanel has rated this update as having a CVSSv3.1 score of 1.8 to 5.3.

Information on cPanel’s security ratings is available at https://go.cpanel.net/securitylevels.

If your deployed cPanel & WHM servers are configured to automatically update when new releases are available, then no action is required. Your systems will update automatically. If you have disabled automatic updates, then we strongly encourage you to update your cPanel & WHM installations at your earliest convenience.

RELEASES