Linux · Security advisory · November 23, 2019

ELSA-2019-3736: Security update for 35 packages

ELSA-2019-3736, released November 23, 2019, fixes 1 CVE across 35 products. One of them is being exploited (CVE-2019-11043); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
1
1 rated Critical
Exploited
1
CVE-2019-11043
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9978
99th percentile

Fixed package versions

ProductReleaseFixed in
apcu-panelol 80:5.1.17-1.module+el8.1.0+5441+020cccf5
libzipol 80:1.5.2-1.module+el8.1.0+5441+020cccf5
libzip-develol 80:1.5.2-1.module+el8.1.0+5441+020cccf5
libzip-toolsol 80:1.5.2-1.module+el8.1.0+5441+020cccf5
phpol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-bcmathol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-cliol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-commonol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-dbaol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-dbgol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-develol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-embeddedol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-enchantol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-fpmol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-gdol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-gmpol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-intlol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-jsonol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-ldapol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-mbstringol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-mysqlndol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-odbcol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-opcacheol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-pdool 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-pearol 81:1.10.9-1.module+el8.1.0+5441+020cccf5
php-pecl-apcuol 80:5.1.17-1.module+el8.1.0+5441+020cccf5
php-pecl-apcu-develol 80:5.1.17-1.module+el8.1.0+5441+020cccf5
php-pecl-zipol 80:1.15.4-1.module+el8.1.0+5441+020cccf5
php-pgsqlol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-processol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-recodeol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-snmpol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-soapol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-xmlol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-xmlrpcol 80:7.3.5-5.module+el8.1.0+5441+020cccf5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2019-11043 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: unde... 9.8 0.9978 KEVRansomwareExploited
Showing 1 to 1 of 1 1