CVE-2026-49975 / HTTP/2 Bomb

Viperdh

Just received an email from LiteSpeed talking about HTTP/2 Bomb. They are not affected by it, but Apache is.

cPanel released a fix 3 days ago https://docs.cpanel.net/changelogs/easyapache-4-change-log-25/

I cannot find any mention on Enhance about CVE-2026-49975 or HTTP/2 Bomb is Apache in Enhance protected from this?

Adam

Enhance deploys the Ubuntu package for apache2 and they have released an update already, the package version is 2.4.58-1ubuntu8.13. Just update with apt as normal.