EasyApache 2018-07-25 Security Release

SUMMARYcPanel, Inc. has updated RPMs for EasyApache 4 with PHP versions 5.6.37, 7.0.31, 7.1.20, and 7.2.8 and released EasyApache 3.36.7 with PHP vers

cPanel Joins DigitalOcean Marketplace
cPanel TSR-2018-0001 Full Disclosure
cPanel TSR-2018-0004 Announcement

SUMMARY
cPanel, Inc. has updated RPMs for EasyApache 4 with PHP versions 5.6.37, 7.0.31, 7.1.20, and 7.2.8 and released EasyApache 3.36.7 with PHP version 5.6.37 on July 25, 2018. This release addresses security vulnerabilities with no CVE numbers currently assigned. We strongly encourage PHP users to update their version of PHP.

AFFECTED VERSIONS
All versions of PHP 5.6 through 5.6.36
All versions of PHP 7.0 through 7.0.30
All versions of PHP 7.1 through 7.1.19
All versions of PHP 7.2 through 7.2.7

SECURITY RATING

At this time, no CVE numbers are assigned. We will update this notice when they are available.

SOLUTION
cPanel, Inc. has released updated RPMs for EasyApache 4 on July 25, 2018 with PHP versions 5.6.37, 7.0.31, 7.1.20, and 7.2.8. Unless you have enabled automatic RPM updates in your cron, update your system with either yum update or WHM’s Run System Update interface.

cPanel, Inc. has released EasyApache 3.36.7 with PHP version 5.6.37. Unless you have disabled EasyApache updates, the EasyApache application updates to the latest version when launched. Run EasyApache to rebuild your profile with the latest version of Apache and PHP.

REFERENCES
http://www.php.net/ChangeLog-7.php
http://www.php.net/ChangeLog-5.php