{"id":2205,"date":"2017-12-24T12:00:52","date_gmt":"2017-12-24T09:00:52","guid":{"rendered":"http:\/\/news.cpanel.com\/?p=54409"},"modified":"2017-12-24T12:00:52","modified_gmt":"2017-12-24T09:00:52","slug":"easyapache-2017-12-5-security-release","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/easyapache-2017-12-5-security-release\/","title":{"rendered":"EasyApache 2017-12-5 Security Release"},"content":{"rendered":"<p>SUMMARY<br \/>cPanel, Inc. has released updated RPMs for EasyApache 4 on December 5, 2017, with cURL 7.57.0 and a patch for APR 1.5.2. This release addresses vulnerabilities related to CVE-2017-8816, CVE-2017-8817, CVE-2017-8818, and CVE-2017-12613. We strongly encourage all cURL users to upgrade to version 7.57.0 and all APR users to apply the patch.<\/p>\n<p>AFFECTED VERSIONS<br \/>All versions of cURL through 7.56.1<br \/>All versions of APR through 1.5.2<\/p>\n<p>SECURITY RATING<br \/>The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:<\/p>\n<p>CVE-2017-8816 \u2013 MEDIUM<br \/>cURL 7.56.1<br \/>Fix buffer overrun flaw related to CVE-2017-8816<\/p>\n<p>CVE-2017-8817 \u2013 MEDIUM<br \/>cURL 7.56.1<br \/>Fix read out of bounds flaw related to CVE-2017-8817<\/p>\n<p>CVE-2017-8818 \u2013 MEDIUM<br \/>cURL 7.56.1<br \/>Fix read out of bounds flaw related to CVE-2017-8818<\/p>\n<p>CVE-2017-12613 \u2013 HIGH<br \/>APR 1.5.2<br \/>Fix out-of-bounds array deref bug related to CVE-2017-12613<\/p>\n<p>SOLUTION<br \/>cPanel, Inc. has released updated RPMs for EasyApache 4 on December 5, 2017, with an updated version of cURL 7.57.0 and a patch for APR 1.5.2. Unless you have enabled automatic RPM updates in your cron, update your system with either yum update or WHM\u2019s Run System Update interface.<\/p>\n<p>REFERENCES<br \/>https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-8816<br \/>https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-8817<br \/>https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-8818<br \/>https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-12613<br \/>https:\/\/curl.haxx.se\/changes.html<\/p>\n<p>For the PGP signed message, please see <a href=\"http:\/\/news.cpanel.com\/wp-content\/uploads\/2017\/12\/EA4-2017-12-5-CVE.txt\" target=\"_blank\" rel=\"noopener\">EA4 2017-12-5 CVE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>SUMMARYcPanel, Inc. has released updated RPMs for EasyApache 4 on December 5, 2017, with cURL 7.57.0 and a patch for APR 1.5.2. This release addresses vulnerabilities related to CVE-2017-8816, CVE-2017-8817, CVE-2017-8818, and CVE-2017-12613. We strongly encourage all cURL users to upgrade to version 7.57.0 and all APR users to apply the patch. AFFECTED VERSIONSAll versions &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[],"class_list":["post-2205","post","type-post","status-publish","format-standard","hentry","category-cpanel-news"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/2205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=2205"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/2205\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=2205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=2205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=2205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}