EasyApache November 2 Release

cPanel, L.L.C. has updated packages for EasyApache 4 with PHP versions 8.1.12 and 8.0.25 and libcurl version 7.86.0. This release addresses vulnerabilities related to CVE-2022-31630, CVE-2022-37454, CVE-2022-32221, CVE-2022-35260, CVE-2022-42915 and CVE-2022-42916. We strongly encourage all PHP 8.1 users to update to version 8.1.12, all PHP 8.0 users to update to version 8.0.25, and all libcurl users to update to version 7.86.0. AFFECTED VERSIONS All versions of PHP 8.1 through 8.1.11. All versions of PHP 8.0 through 8.0.24. All versions of libcurl through 7.85.0. SECURITY RATING The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs: CVE-2022-31630 - HIGH PHP 8.1.12 Fixed vulnerability related to CVE-2022-31630. PHP 8.0.25 Fixed vulnerability related to CVE-2022-31630. CVE-2022-37454 - CRITICAL PHP 8.1.12 Fixed vulnerability related to CVE-2022-37454. PHP 8.0.25 Fixed vulnerability related to CVE-2022-37454. CVE-2022-32221 - MEDIUM libcurl 7.86.0 Fixed vulnerability related to CVE-2022-32221. CVE-2022-35260 - MEDIUM libcurl 7.86.0 Fixed vulnerability related to CVE-2022-35260. CVE-2022-42915 - CRITICAL libcurl 7.86.0 Fixed vulnerability related to CVE-2022-42915. CVE-2022-42916 - HIGH libcurl 7.86.0 Fixed vulnerability related to CVE-2022-42916. SOLUTION cPanel, L.L.C. has released updated packages for EasyApache 4 on Nocember 2, 2022, with PHP versions 8.1.12 and 8.0.25, and libcurl version 7.86.0. Unless you have enabled automatic package updates in your cron, update your system with either your package manager or WHM's Run System Update interface. REFERENCES