Linux · Security advisory · November 15, 2022

ELSA-2022-7628: Security update for 37 packages

ELSA-2022-7628, released November 15, 2022, fixes 3 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.7338
99th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
apcu-panelol 80:5.1.18-1.module+el8.3.0+7685+72d70b58
libzipol 80:1.6.1-1.module+el8.3.0+7685+72d70b58
libzip-develol 80:1.6.1-1.module+el8.3.0+7685+72d70b58
libzip-toolsol 80:1.6.1-1.module+el8.3.0+7685+72d70b58
phpol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-bcmathol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-cliol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-commonol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-dbaol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-dbgol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-develol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-embeddedol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-enchantol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-ffiol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-fpmol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-gdol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-gmpol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-intlol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-jsonol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-ldapol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-mbstringol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-mysqlndol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-odbcol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-opcacheol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-pdool 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-pearol 81:1.10.13-1.module+el8.7.0+20800+8e29b882
php-pecl-apcuol 80:5.1.18-1.module+el8.3.0+7685+72d70b58
php-pecl-apcu-develol 80:5.1.18-1.module+el8.3.0+7685+72d70b58
php-pecl-rrdol 80:2.0.1-1.module+el8.3.0+7685+72d70b58
php-pecl-xdebugol 80:2.9.5-1.module+el8.3.0+7685+72d70b58
php-pecl-zipol 80:1.18.2-1.module+el8.3.0+7685+72d70b58
php-pgsqlol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-processol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-snmpol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-soapol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-xmlol 80:7.4.30-1.module+el8.7.0+20800+8e29b882
php-xmlrpcol 80:7.4.30-1.module+el8.7.0+20800+8e29b882

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-32610 php-pear: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of theextracted archive, a different vulnerabilit... 9.8 0.7338 None reported
High CVE-2021-21707 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... 9.8 0.2532 None reported
High CVE-2021-21708 php-pear: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... 9.8 0.0300 None reported
Showing 1 to 3 of 3 1