EasyApache 4 December 22 Release

[cPanelTabby]

EasyApache 4 December 22 Release
We are happy to announce that cPanel, L.L.C. has released an update for EasyApache 4! Take a look at some highlights below, and then join us on the cPanel Community Forums, Discord, or Reddit to talk about this update and much more. If you have additional questions, feel free to reach out on one of our social channels.

2021-12-22
ea-php74

• EA-10364: Update ea-php74 to 7.4.27, drop 7.4.26.

ea-php74-meta

• EA-10364: Update ea-php74 to 7.4.27, drop 7.4.26.

ea-php80

• EA-10365: Update ea-php80 to 8.0.14, drop 8.0.13.

ea-php80-meta

• EA-10365: Update ea-php80 to 8.0.14, drop 8.0.13.

ea-php81

• EA-10366: Update ea-php81 to 8.1.1, drop 8.1.0.

ea-php81-meta

• EA-10366: Update ea-php81 to 8.1.1, drop 8.1.0.

ea-apache2

• EA-10370: Update ea-apache2 to 2.4.52, drop 2.4.51 (with fixes for CVE-2021-44790 and CVE-2021-44224).

ea-openssl11

• EA-10363: Update ea-openssl11 to 1.1.1m, drop 1.1.1l (with fix for CVE-2021-4044).

This release includes a security patch that has been issued a fix for a CVE (Common Vulnerabilities and Exposures), the details of which are included below.

SUMMARY
cPanel, L.L.C. has updated packages for EasyApache 4 with Apache 2.4.52 and OpenSSL 1.1.1m. This release addresses vulnerabilities related to CVE-2021-44790, CVE-2021-44224, and CVE-2021-4044. We strongly encourage all Apache users to upgrade to version 2.4.52 and all OpenSSL users to upgrade to version 1.1.1m.

AFFECTED VERSIONS
All versions of Apache through 2.4.51.
All versions of OpenSSL through 1.1.1l.

SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:

CVE-2021-44790 - MEDIUM
Apache 2.4.52
Fixed vulnerability related to CVE-2021-44790.

CVE-2021-44224 - MEDIUM
Apache 2.4.52
Fixed vulnerability related to CVE-2021-44224.

CVE-2021-4044 - MEDIUM
OpenSSL 1.1.1m
Fixed vulnerability related to CVE-2021-4044.

SOLUTION
cPanel, L.L.C. has released updated packages for EasyApache 4 on December 22, 2021, with Apache version 2.4.52 and OpenSSL version 1.1.1m. Unless you have enabled automatic package updates in your cron, update your system with either your package manager or WHM's Run System Update interface.

REFERENCES
https://downloads.apache.org/httpd/CHANGES_2.4.52
https://www.openssl.org/news/cl111.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44790
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44224
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4044

Download the Signed PGP message: https://news.cpanel.com/wp-content/uploads/2021/12/EA4-2021-12-22-CVE.signed.txt

More Information

Information about all releases this year can be found in the 2021 EasyApache 4 Changelog and the EasyApache 4 Release Notes. You can also sign up for our EasyApache Development and EasyApache Production mailing lists to see when updates are pushed for our RPMs, letting you know ahead of time what will be updated in each EasyApache release.

 

[donovang]

Has this update been pushed out to the repository yet? I'm attempting to update my system an I'm not finding it. Is there something specific that needs to be done to make this available on my system?

 

[Nirjonadda]

Not updated to OpenSSL 1.1.1m

[root@na ~]# yum update
EA4 ( EasyApache 4 )                            1.4 MB/s | 2.9 MB     00:02
cPanel Addons Production Feed                                                                                                                                                                                8.5 kB/s | 8.9 kB     00:01
cPanel Plugins project                                                                                                                                                                                       259 kB/s | 418 kB     00:01
MySQL Connectors Community                                                                                                                                                                                   1.5 MB/s |  74 kB     00:00
MySQL Tools Community                                                                                                                                                                                         10 MB/s | 376 kB     00:00
MySQL 8.0 Community Server                                                                                                                                                                                    22 MB/s | 2.1 MB     00:00
AlmaLinux 8 - BaseOS                                                                                                                                                                                         968 kB/s | 4.9 MB     00:05
AlmaLinux 8 - AppStream                                                                                                                                                                                      8.9 MB/s | 8.6 MB     00:00
AlmaLinux 8 - Extras                                                                                                                                                                                          27 kB/s |  12 kB     00:00
AlmaLinux 8 - PowerTools                                                                                                                                                                                     4.0 MB/s | 2.4 MB     00:00
Extra Packages for Enterprise Linux 8 - x86_64                                                                                                                                                                13 MB/s |  11 MB     00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64                                                                                                                                                       1.9 MB/s | 980 kB     00:00
Imunify360 - Gradual Rollout Slot 1                                                                                                                                                                          261  B/s | 257  B     00:00
Imunify360 - Gradual Rollout Slot 2                                                                                                                                                                          262  B/s | 257  B     00:00
Imunify360 - Gradual Rollout Slot 3                                                                                                                                                                          261  B/s | 257  B     00:00
Imunify360 - Gradual Rollout Slot 4                                                                                                                                                                          263  B/s | 257  B     00:00
EL-8 - Imunify360                                                                                                                                                                                            708 kB/s | 3.0 MB     00:04
kernelcare                                                                                                                                                                                                    21 kB/s |  21 kB     00:01
Dependencies resolved.
Nothing to do.
Complete!
[root@na ~]#

 

[Nirjonadda]

Not updated to OpenSSL 1.1.1m

[root@na ~]# yum update
EA4 ( EasyApache 4 )                            1.4 MB/s | 2.9 MB     00:02
cPanel Addons Production Feed                                                                                                                                                                                8.5 kB/s | 8.9 kB     00:01
cPanel Plugins project                                                                                                                                                                                       259 kB/s | 418 kB     00:01
MySQL Connectors Community                                                                                                                                                                                   1.5 MB/s |  74 kB     00:00
MySQL Tools Community                                                                                                                                                                                         10 MB/s | 376 kB     00:00
MySQL 8.0 Community Server                                                                                                                                                                                    22 MB/s | 2.1 MB     00:00
AlmaLinux 8 - BaseOS                                                                                                                                                                                         968 kB/s | 4.9 MB     00:05
AlmaLinux 8 - AppStream                                                                                                                                                                                      8.9 MB/s | 8.6 MB     00:00
AlmaLinux 8 - Extras                                                                                                                                                                                          27 kB/s |  12 kB     00:00
AlmaLinux 8 - PowerTools                                                                                                                                                                                     4.0 MB/s | 2.4 MB     00:00
Extra Packages for Enterprise Linux 8 - x86_64                                                                                                                                                                13 MB/s |  11 MB     00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64                                                                                                                                                       1.9 MB/s | 980 kB     00:00
Imunify360 - Gradual Rollout Slot 1                                                                                                                                                                          261  B/s | 257  B     00:00
Imunify360 - Gradual Rollout Slot 2                                                                                                                                                                          262  B/s | 257  B     00:00
Imunify360 - Gradual Rollout Slot 3                                                                                                                                                                          261  B/s | 257  B     00:00
Imunify360 - Gradual Rollout Slot 4                                                                                                                                                                          263  B/s | 257  B     00:00
EL-8 - Imunify360                                                                                                                                                                                            708 kB/s | 3.0 MB     00:04
kernelcare                                                                                                                                                                                                    21 kB/s |  21 kB     00:01
Dependencies resolved.
Nothing to do.
Complete!
[root@na ~]#

 

[quietFinn]

EasyApache does not provide updates to OpenSSL in AlmaLinux 8:

Introduction to EasyApache 4 | cPanel & WHM Documentation

This document provides an overview of the improvements and benefits that EasyApache 4 provides.

docs.cpanel.net