cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system. If your deployed cPanel & WHM servers are configured to automatically update when new releases are available, then no action is required. Your systems will update automatically. If you have disabled automatic updates, then you are highly encouraged to update your cPanel & WHM installs at your earliest convenience.
Releases
The following cPanel & WHM versions address all known vulnerabilities:
11.32.3.19 for EDGE and CURRENT update tier
11.32.2.28 for RELEASE, STABLE, and 11.32 LTS update tier
11.30.6.8 for 11.30 LTS update tier
The latest public releases of cPanel & WHM for all update tiers is published at http://httpupdate.cpanel.net.
Security Issue Information
The resolved security issues were identified during the course of cPanel’s normal Quality Assurance testing. There is no reason to believe that these vulnerabilities are known to the public. As such, cPanel will only release limited information regarding the vulnerabilities.
Once sufficient time has passed to allow cPanel & WHM systems to automatically update their installed software to the new versions, cPanel will release additional information regarding the nature of the security issue. If you have any questions or concerns, then please contact our Customer Service team. Contact information for cPanel can be found on the following web page:
http://cpanel.net/support.html
These Targeted Security Releases address two vulnerabilities. Additional information will be released on 2012-06-04.
