-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

SUMMARY
cPanel, Inc. has released EasyApache 3.34.1 with PHP versions 5.5.37 and 5.6.23. This release addresses vulnerabilities related to CVE-2015-8874. We strongly encourage all PHP 5.5 users to upgrade version 5.5.37. 
 
AFFECTED VERSIONS

All versions of PHP 5.5 through version 5.5.36
 
SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:
 
CVE-2015-8874 - HIGH
PHP 5.5.37
Fixed bug in the GD module related to CVE-2015-8874

SOLUTION
cPanel, Inc. has released EasyApache 3.34.1 with an updated version of PHP 5.5.37. Unless you have disabled EasyApache updates, the EasyApache application updates to the latest version when launched. Run EasyApache to rebuild your profile with the latest version of PHP.
 
REFERENCES
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8874
http://php.net/ChangeLog-5.php



SUMMARY
cPanel, Inc. has released updated RPMs for EasyApache 4 on June 28, 2016, with PHP version 5.5.37. This release addresses vulnerabilities related to CVE-2015-8874. We strongly encourage all PHP 5.5 users to upgrade to version 5.5.37.
 
AFFECTED VERSIONS

All versions of PHP 5.5 through version 5.5.36
 
SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:
 
CVE-2015-8874 - HIGH
PHP 5.5.37
Fixed bug in the GD module related to CVE-2015-8874

SOLUTION
cPanel, Inc. has released updated RPMs for EasyApache 4 on June 28, 2016, with an updated version of PHP 5.5.37. Unless you have enabled automatic RPM updates in your cron, update your system with either yum update or WHM's Run System Update interface.
 
REFERENCES
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8874
http://php.net/ChangeLog-5.php
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=btrj
-----END PGP SIGNATURE-----