Security Advisory: Exim & Apache Update

As of May 2026, critical vulnerabilities have been identified in Exim (RCE) and Apache HTTP Server (HTTP/2 Double-Free). Immediate patching is required to prevent unauthorized server access.

Required Versions:
• Exim: 4.99.3 or higher
• Apache HTTP Server: 2.4.67 or higher

1. Exim Mail Server Update

Ubuntu / Debian

Update via standard APT repositories:

sudo apt update
sudo apt install --only-upgrade exim4
sudo systemctl restart exim4
RHEL / Rocky Linux / AlmaLinux / CentOS

Ensure the EPEL repository is enabled, then run:

sudo dnf clean all
sudo dnf update exim -y
sudo systemctl restart exim

Note: For CentOS 7, use yum instead of dnf.

Control Panels (cPanel / DirectAdmin)

cPanel: Force update via WHM scripts:

/scripts/upcp --force

2. Apache HTTP Server Update

Ubuntu / Debian 
sudo add-apt-repository ppa:ondrej/apache2 -y
sudo apt update && sudo apt install --only-upgrade apache2
sudo systemctl restart apache2
RHEL / Rocky Linux / AlmaLinux 
sudo dnf update httpd -y
sudo systemctl restart httpd
cPanel (EasyApache 4) 
dnf clean all
dnf update ea-apache24*
/scripts/restartsrv_httpd

3. How to Verify Versions

Run these commands to ensure your server is protected:

Last Updated: May 15, 2026 | Technical Support Department