Linux · Security advisory · September 8, 2020
RHSA-2020:3662: Security update for 37 packages
RHSA-2020:3662, released September 8, 2020, fixes 22 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
22
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0889
95th percentile
Priority of the 22 CVEs
Patch now 0
Urgent 0
High 13
Routine 9
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| apcu-panel | RHEL 8 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| libzip | RHEL 8 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| libzip-devel | RHEL 8 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| libzip-tools | RHEL 8 | 0:1.5.2-1.module+el8.1.0+3189+a1bff096 |
| php | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-bcmath | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-cli | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-common | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-dba | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-dbg | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-devel | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-embedded | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-enchant | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-fpm | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-gd | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-gmp | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-intl | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-json | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-ldap | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-mbstring | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-mysqlnd | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-odbc | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-opcache | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-pdo | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-pear | RHEL 8 | 1:1.10.9-1.module+el8.1.0+3189+a1bff096 |
| php-pecl-apcu | RHEL 8 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| php-pecl-apcu-devel | RHEL 8 | 0:5.1.17-1.module+el8.1.0+3189+a1bff096 |
| php-pecl-rrd | RHEL 8 | 0:2.0.1-1.module+el8.2.0+4968+1d5097db |
| php-pecl-xdebug | RHEL 8 | 0:2.8.0-1.module+el8.2.0+4968+1d5097db |
| php-pecl-zip | RHEL 8 | 0:1.15.4-1.module+el8.1.0+3189+a1bff096 |
| php-pgsql | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-process | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-recode | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-snmp | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-soap | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-xml | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
| php-xmlrpc | RHEL 8 | 0:7.3.20-1.module+el8.2.0+7373+b272fdef |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2020-7060 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 9.1 | 0.0889 | None reported | |
| High | CVE-2020-7059 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 9.1 | 0.0740 | None reported | |
| High | CVE-2019-19204 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0689 | None reported | |
| High | CVE-2019-11048 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0626 | None reported | |
| High | CVE-2020-7065 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 8.8 | 0.0488 | None reported | |
| High | CVE-2019-11041 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.1 | 0.0442 | None reported | |
| High | CVE-2019-11042 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.1 | 0.0442 | None reported | |
| High | CVE-2019-11040 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 9.1 | 0.0407 | None reported | |
| High | CVE-2019-19203 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0405 | None reported | |
| High | CVE-2020-7062 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0358 | None reported | |
| High | CVE-2019-11039 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 9.1 | 0.0313 | None reported | |
| High | CVE-2019-19246 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0297 | None reported | |
| High | CVE-2019-20454 | php-cli: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 7.5 | 0.0156 | None reported | |
| Routine | CVE-2019-11045 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 5.9 | 0.0882 | None reported | |
| Routine | CVE-2019-11050 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 6.5 | 0.0762 | None reported | |
| Routine | CVE-2019-11047 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 6.5 | 0.0747 | None reported | |
| Routine | CVE-2020-7064 | php: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 5.4 | 0.0430 | None reported | |
| Routine | CVE-2019-13224 | libonig5: A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allowsattackers to potentially cause information... | 6.8 | 0.0405 | None reported | |
| Routine | CVE-2020-7066 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 4.3 | 0.0277 | None reported | |
| Routine | CVE-2019-16163 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 6.5 | 0.0275 | None reported | |
| Routine | CVE-2019-13225 | oniguruma: This update for oniguruma fixes the following issues: - CVE-2019-13225: Fixed null-pointer dereference in match_at()... | 6.5 | 0.0213 | None reported | |
| Routine | CVE-2020-7063 | apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be... | 5.5 | 0.0159 | None reported |
Showing 1 to 22 of 22
1