Linux · Oracle Linux · Security advisory · May 5, 2020

ELSA-2020-1624: Security update for 35 packages

ELSA-2020-1624, released May 5, 2020, fixes 13 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
13
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.1006
95th percentile

Priority of the 13 CVEs

Patch now 0 Urgent 0 High 13 Routine 0

Fixed package versions

ProductReleaseFixed in
apcu-panelol 80:5.1.12-2.module+el8.2.0+5510+6771133c
libzipol 80:1.5.1-2.module+el8.2.0+5510+6771133c
libzip-develol 80:1.5.1-2.module+el8.2.0+5510+6771133c
libzip-toolsol 80:1.5.1-2.module+el8.2.0+5510+6771133c
phpol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-bcmathol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-cliol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-commonol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-dbaol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-dbgol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-develol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-embeddedol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-enchantol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-fpmol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-gdol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-gmpol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-intlol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-jsonol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-ldapol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-mbstringol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-mysqlndol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-odbcol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-opcacheol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-pdool 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-pearol 81:1.10.5-9.module+el8.2.0+5510+6771133c
php-pecl-apcuol 80:5.1.12-2.module+el8.2.0+5510+6771133c
php-pecl-apcu-develol 80:5.1.12-2.module+el8.2.0+5510+6771133c
php-pecl-zipol 80:1.15.3-1.module+el8.2.0+5510+6771133c
php-pgsqlol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-processol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-recodeol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-snmpol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-soapol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-xmlol 80:7.2.24-1.module+el8.2.0+5510+6771133c
php-xmlrpcol 80:7.2.24-1.module+el8.2.0+5510+6771133c

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-9020 php-dba: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.8 0.1006 None reported
High CVE-2019-9021 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.8 0.1006 None reported
High CVE-2019-9023 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.8 0.0932 None reported
High CVE-2019-9639 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0820 None reported
High CVE-2019-9637 php-enchant: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0735 None reported
High CVE-2019-9024 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0712 None reported
High CVE-2019-11036 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.1 0.0703 None reported
High CVE-2019-9638 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0668 None reported
High CVE-2019-9640 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0618 None reported
High CVE-2018-20783 php7.2-pspell: In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR rea...7.5 0.0566 None reported
High CVE-2019-11035 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.1 0.0441 None reported
High CVE-2019-9022 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0419 None reported
High CVE-2019-11034 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.1 0.0409 None reported
Showing 1 to 13 of 13 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.