Linux · Oracle Linux · Security advisory · November 23, 2019

ELSA-2019-3736: Security update for 35 packages

ELSA-2019-3736, released November 23, 2019, fixes 1 CVE across 35 products. One of them is being exploited (CVE-2019-11043); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
1
1 rated Critical
Exploited
1
CVE-2019-11043
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.9978
99th percentile

Fixed package versions

ProductReleaseFixed in
apcu-panelol 80:5.1.17-1.module+el8.1.0+5441+020cccf5
libzipol 80:1.5.2-1.module+el8.1.0+5441+020cccf5
libzip-develol 80:1.5.2-1.module+el8.1.0+5441+020cccf5
libzip-toolsol 80:1.5.2-1.module+el8.1.0+5441+020cccf5
phpol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-bcmathol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-cliol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-commonol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-dbaol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-dbgol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-develol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-embeddedol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-enchantol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-fpmol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-gdol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-gmpol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-intlol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-jsonol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-ldapol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-mbstringol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-mysqlndol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-odbcol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-opcacheol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-pdool 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-pearol 81:1.10.9-1.module+el8.1.0+5441+020cccf5
php-pecl-apcuol 80:5.1.17-1.module+el8.1.0+5441+020cccf5
php-pecl-apcu-develol 80:5.1.17-1.module+el8.1.0+5441+020cccf5
php-pecl-zipol 80:1.15.4-1.module+el8.1.0+5441+020cccf5
php-pgsqlol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-processol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-recodeol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-snmpol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-soapol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-xmlol 80:7.3.5-5.module+el8.1.0+5441+020cccf5
php-xmlrpcol 80:7.3.5-5.module+el8.1.0+5441+020cccf5

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2019-11043 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: unde...9.8 0.9978 KEVRansomwareExploited
Showing 1 to 1 of 1 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.