Change log

Every security update, fix, deploy and change to the settings or infrastructure of our services, newest first. Each also shows in the day bars of every service it touched, in its kind’s colour.

23 October 20261 change

  1. Deploy03:30

    Upgraded to official versions: CloudLinux released builds carrying the official PHP version numbers (alt-php at 03:08, ea-php at 16:10). We upgraded PHP to 8.2.35, 8.3.36, 8.4.27 and 8.5.12.

    cPanel hostingTechnical supportHelp centerIllevante websiteIllevante community

22 October 20263 changes

  1. Emergency fix08:41

    alt-php hardened: We installed patched alt-php packages for all versions from 5.2 to 8.5, then restarted the services.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical support

  2. Emergency fixScheduled01:00

    Scheduled restart: We restarted the server to apply a kernel update and to ensure every PHP process was running the patched builds.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical support

  3. Emergency fix00:19

    ea-php hardened: We installed CloudLinux’s patched EasyApache 4 packages for all ea-php versions. CloudLinux added the fix to the existing builds while keeping their version numbers (for example, 8.4.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical support

21 October 20263 changes

  1. Emergency fix21:30

    Our team began tracking CloudLinux releases and applying updates as soon as they were available.

    cPanel hostingIllevante websiteHelp centerTechnical supportIllevante community

  2. Emergency fix17:00

    PHP released versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12.

    Running CoreVPS serverscPanel hostingTechnical supportIllevante communityHelp centerIllevante website

  3. Vulnerability fixMitigated12:08

    CloudLinux released Imunify360 protection rules (ruleset 8.83) to block known exploit attempts.

    Running CoreVPS serverscPanel hostingIllevante websiteHelp centerTechnical supportIllevante community

20 October 20262 changes

  1. Vulnerability fixBeing applied22:35

    The PHP Security Team announced an emergency security release for the two vulnerabilities.

    Technical supportIllevante communityHelp centerIllevante websitecPanel hostingRunning CoreVPS servers

  2. Vulnerability fixBeing applied22:30

    Critical PHP vulnerabilities (PHP2Shell): CVE-2026-109618 and CVE-2026-109619

    Two critical PHP vulnerabilities (CVSS v4 9.2) allowed remote code execution without authentication. They affected every PHP setup that serves websites. We have updated all PHP versions on our hosting servers, and shared hosting customers do not need to take any action.

    cPanel hostingIllevante websiteHelp centerIllevante communityTechnical supportRunning CoreVPS servers

Illevante website