cPanel PHP Upgrade from PHP 7.4 to PHP 8.1
In cPanel & WHM version 110, we upgraded internal cPanel PHP from version 7.4 to 8.1.
Important Notices
CVE 2017 1000369 Exim Stack Clash
On Monday, June 19, 2017, Qualsys announced memory handling vulnerabilities in a number of software distributions, including a vulnerability that could leverage a bug in the Exim software to achieve a local privilege escalation to root.
CVE 2017 16943 and CVE 2017 16944 Exim
On Friday, November 24 2017, Exim announced two vulnerabilities in versions 4.88 and later.
CVE 2019 7524 Buffer overflow when reading extension header from Dovecot index files
We were made aware of a CVE in Dovecot Versions 2.0.14 - 2.3.5 that involves using Solr on Thursday, March 28th 2019.
CVE-2015-2035-GHOST
On 27 January 2015, a vulnerability in all versions of the GNU C library (glibc) was announced by Qualys.
CVE-2016-1238 Perl
On July 25 2016, Perl announced a vulnerability in all versions of the Perl 5 software.
CVE-2016-1531 Exim
On Wednesday, March 2, 2016, Exim announced a vulnerability in all versions of the Exim software.
CVE-2016-3714 ImageMagick
On Tuesday, May 3 2016, ImageMagick announced a vulnerability in all versions of the ImageMagick software. ImageMagick is a software package commonly used by web services to process images.
CVE-2016-5387 HTTPOXY
This document describes the Apache-disclosed vulnerability that affects application code which runs in CGI, or CGI-like environments.
CVE-2016-6662 MySQL
This document describes multiple MySQL® vulnerabilities reported by an independent researcher on 12 September, 2016.
CVE-2016-9963 Exim
On Sunday, December 25, 2016, Exim announced a vulnerability in versions 4.69 to 4.87 of the Exim software.
CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Meltdown
Red Hat has been made aware of multiple microarchitectural (hardware) implementation issues affecting many modern microprocessors, requiring updates to the Linux kernel, virtualization-related components, and/or in combination with a microcode update.
CVE-2019-10149 Exim
Exim maintainers announced that they received a report of a potential remote exploit in Exim from version 4.87 to version 4.91.