EasyApache 4 release for CVE-2019-9517

[wintech2003]

Hello,

When is a new EasyApache 4 release expected to mitigate the HTTP/2 vulnerabilities found in CVE-2019-9517?
They're fixed in Apache 2.4.41: httpd 2.4 vulnerabilities - The Apache HTTP Server Project

I can see the master branch of ea-apache2 in Github already has the updated Apache version since 4 days ago, so I guess they will be released soon?

Thanks

 

[cPanelLauren]

Hello @wintech2003

I've just taken a look through the open cases and it looks like we've tentatively got the next easyapache update slated for tomorrow the 21st. The update will include an update to Apache to 2.4.41 as well.
You can check the status in our EasyApache Changelogs here: EasyApache 4 Change Log 2019 - EasyApache 4 - cPanel Documentation