CPANEL-42410 - ClamAV CVE-2023-20032 & CVE-2023-20052, RCE with 9.8 CVSS

weetabix

• February 17, 2023 10:22

Cpanel on top of this?

• 

  Babene7

  • February 17, 2023 15:24

  I'm interested in this too, looks like the ClamAV version provided by cPanel hasn't been updated yet. This needs to be patched ASAP! @cPRex any ETA?

  0
• 

  cPRex Jurassic Moderator

  • February 17, 2023 15:47

  Hey there! Our developers have case CPANEL-42410 open for this issue already, which will patch the version in 108 and 110. I see we have a fix in place, but it just hasn't been pushed to production yet. I'll monitor the case and post an update once that happens.

  0
• 

  cPRex Jurassic Moderator

  • February 17, 2023 17:34

  Update - we're also planning to include these in version 106 and 102LTS.

  0
• 

  weetabix

  • March 26, 2023 16:23

  Update - we're also planning to include these in version 106 and 102LTS.

  
  Any news on this? Is this already pushed out?

  0
• 

  cPRex Jurassic Moderator

  • March 27, 2023 11:26

  Yes, this has already been completed in versions 108.0.12, 106.0.16, and 110.0.0.

  0
• 

  ffeingol

  • March 27, 2023 12:56

  How about 102LTS.?

  0
• 

  cPRex Jurassic Moderator

  • March 27, 2023 15:50

  102.0.29!

  0

Please sign in to leave a comment.