EasyApache August 16 Maintenance and Security Release

cPRex Jurassic Moderator

August 16, 2023 12:40

cPanel, L.L.C. has released a security update for , to talk about this update and much more. If you have additional questions, feel free to reach out on one of our social channels.

ea-tomcat85
- EA-11607: Update ea-tomcat85 from v8.5.91 to v8.5.92
ea-tomcat100
- ZC-11053: Mark as EOL
ea-tomcat101
- ZC-11053: Initial Build
ea-cpanel-tools
- ZC-11122: Add ea-tomcat101 to the manifest.
ea-nodejs16
- EA-11604: Update ea-nodejs16 from v16.20.1 to v16.20.2
  - " CVE-2023-32559: Policies can be bypassed via process.binding " CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire " CVE-2023-32002: Policies can be bypassed via Module.\_load " OpenSSL sources upgraded upstream to latest
ea-libxml2
- EA-11608: Update ea-libxml2 from v2.11.4 to v2.11.5

SUMMARY cPanel, L.L.C. has updated packages for EasyApache 4 with NodeJS version 16.20.2 This release addresses vulnerabilities related to CVE-2023-32559, CVE-2023-32006, and CVE-2023-32002. We strongly encourage all NodeJS users to upgrade to version 16.20.2. AFFECTED VERSIONS All versions of NodeJS through 16.20.1. SECURITY RATING The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs: CVE-2023-32559 " MEDIUM NodeJS 16.20.2 Fixed vulnerability related to CVE-2023-32559. CVE-2023-32006 " MEDIUM NodeJS 16.20.2 Fixed vulnerability related to CVE-2023-32006. CVE-2023-32002 " MEDIUM NodeJS 16.20.2 Fixed vulnerability related to CVE-2023-32002. SOLUTION cPanel, L.L.C. has released updated packages for EasyApache 4 on August 16, 2023, with NodeJS version 16.20.2. Unless you have enabled automatic package updates in your cron, update your system with either your package manager or WHM"s Run System Update interface. REFERENCES and the and

Comments

0 comments

Please sign in to leave a comment.