-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

SUMMARY

cPanel, L.L.C. has updated packages for EasyApache 4 with a updated versions of libxml2 and valkey. This release addresses vulnerabilities related to CVE-2025-32415, CVE-2025-32414, and CVE-2025-21605. We strongly encourage all libxml2 users update to version 2.13.8 and all valkey users to update to version 7.2.9.

 
AFFECTED VERSIONS
All versions of libxml2 through 2.13.7.
All versions of valkey through 7.2.8.


SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:

CVE-2025-32415 - HIGH
libxml2 2.13.8
Fixed vulnerability related to CVE-2025-32415.


CVE-2025-32414 - HIGH
libxml2 2.13.8
Fixed vulnerability related to CVE-2025-32414.


CVE-2025-21605 - MEDIUM
valkey 7.2.9
Fixed vulnerability related to CVE-2025-21605.


SOLUTION
cPanel, L.L.C. has released updated packages for EasyApache 4 25.14 on 2025 April 30, with libxml2 version 2.13.8 and valkey version 7.2.9. Unless you have enabled automatic package updates in your cron, update your system with either your package manager or WHM's Run System Update interface.

 
REFERENCES
https://www.cve.org/CVERecord?id=CVE-2025-32415
https://www.cve.org/CVERecord?id=CVE-2025-32414
https://www.cve.org/CVERecord?id=CVE-2025-21605
https://gitlab.gnome.org/GNOME/libxml2/-/releases
https://github.com/valkey-io/valkey/releases/tag/7.2.9
-----BEGIN PGP SIGNATURE-----
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=W9KB
-----END PGP SIGNATURE-----