Linux · Security advisory · November 15, 2022

ALSA-2022:8197: Security update for 25 packages

ALSA-2022:8197, released November 15, 2022, fixes 2 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0379
90th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
phpalmalinux 98.0.20-3.el9
php-bcmathalmalinux 98.0.20-3.el9
php-clialmalinux 98.0.20-3.el9
php-commonalmalinux 98.0.20-3.el9
php-dbaalmalinux 98.0.20-3.el9
php-dbgalmalinux 98.0.20-3.el9
php-develalmalinux 98.0.20-3.el9
php-embeddedalmalinux 98.0.20-3.el9
php-enchantalmalinux 98.0.20-3.el9
php-ffialmalinux 98.0.20-3.el9
php-fpmalmalinux 98.0.20-3.el9
php-gdalmalinux 98.0.20-3.el9
php-gmpalmalinux 98.0.20-3.el9
php-intlalmalinux 98.0.20-3.el9
php-ldapalmalinux 98.0.20-3.el9
php-mbstringalmalinux 98.0.20-3.el9
php-mysqlndalmalinux 98.0.20-3.el9
php-odbcalmalinux 98.0.20-3.el9
php-opcachealmalinux 98.0.20-3.el9
php-pdoalmalinux 98.0.20-3.el9
php-pgsqlalmalinux 98.0.20-3.el9
php-processalmalinux 98.0.20-3.el9
php-snmpalmalinux 98.0.20-3.el9
php-soapalmalinux 98.0.20-3.el9
php-xmlalmalinux 98.0.20-3.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-31625 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... 9.8 0.0379 None reported
High CVE-2021-21708 php-pear: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... 9.8 0.0300 None reported
Showing 1 to 2 of 2 1