Security is a paramount concern in the digital world, and web hosting is no exception. At UnderHost, we understand the importance of safeguarding your online presence, which is why we've compiled this comprehensive guide to web hosting security. From understanding common vulnerabilities to implementing best practices, we'll cover everything you need to ensure your website is protected against potential threats.
A vulnerability, called Log4Shell, was found in Log4j 2. Log4j is an open-source Apache logging library. This library is used by many popular applications, services, and Java components. The vulnerability is indexed as CVE-2021-44228 and assessed as a critical vulnerability. The flaw enables an attacker to execute arbitrary code on the affected system. Even though the vulnerability is severe, our products and services are not impacted.
Dirty COW is a 2016 Linux kernel flaw that let a local user gain root. Every supported Linux release has been patched for years, so if your server gets regular updates, you are safe from it. What matters today is the same habit for newer kernel flaws: update the kernel package, reboot or live-patch so the new kernel actually runs, and check the running version with uname -r.
This blog post has been updated! PHP 7 is now obsolete, and cPanel officially supports PHP 8.1, 8.2, and 8.3. At UnderHost, we use CloudLinux on our shared servers, allowing customers to select PHP versions from 5.6 up to 8.4. Learn more about supported versions and how to upgrade via EasyApache 4.
Keeping Exim up to date is crucial for security and performance on cPanel servers. cPanel provides a built-in script to upgrade Exim manually. Follow this quick guide to update your mail server with a single command.