Linux · Red Hat · Security advisory · April 28, 2020

RHSA-2020:1624: Security update for 35 packages

RHSA-2020:1624, released April 28, 2020, fixes 13 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
13
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.1006
95th percentile

Priority of the 13 CVEs

Patch now 0 Urgent 0 High 13 Routine 0

Fixed package versions

ProductReleaseFixed in
apcu-panelRHEL 80:5.1.12-2.module+el8.1.0+3202+af5476b9
libzipRHEL 80:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-develRHEL 80:1.5.1-2.module+el8.1.0+3202+af5476b9
libzip-toolsRHEL 80:1.5.1-2.module+el8.1.0+3202+af5476b9
phpRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-bcmathRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-cliRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-commonRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dbaRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-dbgRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-develRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-embeddedRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-enchantRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-fpmRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gdRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-gmpRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-intlRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-jsonRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-ldapRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mbstringRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-mysqlndRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-odbcRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-opcacheRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pdoRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-pearRHEL 81:1.10.5-9.module+el8.1.0+3202+af5476b9
php-pecl-apcuRHEL 80:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-apcu-develRHEL 80:5.1.12-2.module+el8.1.0+3202+af5476b9
php-pecl-zipRHEL 80:1.15.3-1.module+el8.1.0+3186+20164e6f
php-pgsqlRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-processRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-recodeRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-snmpRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-soapRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-xmlRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223
php-xmlrpcRHEL 80:7.2.24-1.module+el8.2.0+4601+7c76a223

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-9020 php-dba: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.8 0.1006 None reported
High CVE-2019-9021 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.8 0.1006 None reported
High CVE-2019-9023 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.8 0.0932 None reported
High CVE-2019-9639 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0820 None reported
High CVE-2019-9637 php-enchant: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0735 None reported
High CVE-2019-9024 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0712 None reported
High CVE-2019-11036 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.1 0.0703 None reported
High CVE-2019-9638 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0668 None reported
High CVE-2019-9640 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0618 None reported
High CVE-2018-20783 php7.2-pspell: In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR rea...7.5 0.0566 None reported
High CVE-2019-11035 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.1 0.0441 None reported
High CVE-2019-9022 php-devel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...7.5 0.0419 None reported
High CVE-2019-11034 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have be...9.1 0.0409 None reported
Showing 1 to 13 of 13 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.