Linux · Security advisory · February 20, 2024
ALSA-2024:0889: Security update for 2 packages
ALSA-2024:0889, released February 20, 2024, fixes 5 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1063
95th percentile
Priority of the 5 CVEs
Patch now 0
Urgent 0
High 3
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| oniguruma | almalinux 8 | 6.8.2-2.1.el8_9 |
| oniguruma-devel | almalinux 8 | 6.8.2-2.1.el8_9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-19012 | oniguruma: Oniguruma is a regular expressions library that supports a variety of character encodings | 7.5 | 0.1063 | None reported | |
| High | CVE-2019-19204 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0689 | None reported | |
| High | CVE-2019-19203 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0405 | None reported | |
| Routine | CVE-2019-13224 | libonig5: A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allowsattackers to potentially cause information... | 6.8 | 0.0405 | None reported | |
| Routine | CVE-2019-16163 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 6.5 | 0.0275 | None reported |
Showing 1 to 5 of 5
1