29/08/2026
EasyApache 4 v25.79 is now available:
• ea-passenger-src and ea-ruby27-passenger hardened so an empty API account database confers no privileges on the Passenger agent API. Root and the agent process owner retain access through the existing uid-based path (SEC-75753).
• ea-apache24-mod-passenger rebuilt to include the hardened ea-passenger-src.
• ea-nginx-passenger rebuilt to include the hardened ea-passenger-src.
Review the full EasyApache 4 change log → Link in the first comment