Change log

Every security update, fix, deploy and change to the settings or infrastructure of our services, newest first. Each also shows in the day bars of every service it touched, in its kind’s colour.

7 November 20261 change

  1. New release05:55

    cPanel updated to 11.138.0.21

    cPanel was updated from version 11.138.0.20 to version 11.138.0.21.

    cPanel hosting

5 November 20261 change

  1. New release07:50

    cPanel updated to 11.138.0.20

    cPanel was updated from version 11.138.0.19 to version 11.138.0.20.

    cPanel hosting

23 October 20261 change

  1. Deploy04:30

    Upgraded to official versions: CloudLinux released builds carrying the official PHP version numbers (alt-php at 03:08, ea-php at 16:10). We upgraded PHP to 8.2.35, 8.3.36, 8.4.27 and 8.5.12.

    cPanel hostingTechnical supportHelp centerIllevante websiteIllevante community

22 October 20263 changes

  1. Emergency fix09:41

    alt-php hardened: We installed patched alt-php packages for all versions from 5.2 to 8.5, then restarted the services.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical support

  2. Emergency fixScheduled02:00

    Scheduled restart: We restarted the server to apply a kernel update and to ensure every PHP process was running the patched builds.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical support

  3. Emergency fix01:19

    ea-php hardened: We installed CloudLinux’s patched EasyApache 4 packages for all ea-php versions. CloudLinux added the fix to the existing builds while keeping their version numbers (for example, 8.4.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical support

21 October 20263 changes

  1. Emergency fix22:30

    Our team began tracking CloudLinux releases and applying updates as soon as they were available.

    cPanel hostingIllevante websiteHelp centerTechnical supportIllevante community

  2. Emergency fix18:00

    PHP released versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12.

    Running CoreVPS serverscPanel hostingTechnical supportIllevante communityHelp centerIllevante website

  3. Vulnerability fixMitigated13:08

    CloudLinux released Imunify360 protection rules (ruleset 8.83) to block known exploit attempts.

    Running CoreVPS serverscPanel hostingIllevante websiteHelp centerTechnical supportIllevante community

20 October 20262 changes

  1. Vulnerability fixBeing applied23:35

    The PHP Security Team announced an emergency security release for the two vulnerabilities.

    Technical supportIllevante communityHelp centerIllevante websitecPanel hostingRunning CoreVPS servers

  2. Vulnerability fixBeing applied23:30

    Critical PHP vulnerabilities (PHP2Shell): CVE-2026-109618 and CVE-2026-109619

    Two critical PHP vulnerabilities (CVSS v4 9.2) allowed remote code execution without authentication. They affected every PHP setup that serves websites. We have updated all PHP versions on our hosting servers, and shared hosting customers do not need to take any action.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical supportRunning CoreVPS servers