php:7.3 enhancement update - Vulnerability in apcu-panel
Summary
ALEA-2020:1692: php:7.3 enhancement update. Affects apcu-panel across 3 version ranges.
< 5.1.17-1.module_el8.3.0+2009+b272fdef
< 5.1.17-1.module_el8.4.0+2229+b272fdef
< 5.1.17-1.module_el8.5.0+152+112d3b8c
Fixed in 5.1.17-1.module_el8.3.0+2009+b272fdef, 5.1.17-1.module_el8.4.0+2229+b272fdef or 5.1.17-1.module_el8.5.0+152+112d3b8c, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The apcu-panel package is a part of the AlmaLinux 8 ecosystem. It provides a web-based user interface for monitoring and managing the APCu caching system in PHP applications. APCu is a user cache for PHP that provides data caching capabilities to improve application performance.
Vulnerability Detail
The vulnerability in apcu-panel affects versions 0 to 5.1.17-1.module_el8.4.0+2229+b272fdef. The specific details of the vulnerability can be found in the AlmaLinux Release Notes linked in the References section. This vulnerability could potentially allow an attacker to execute arbitrary code or gain unauthorized access to sensitive information.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update apcu-panel-
< 5.1.17-1.module_el8.3.0+2009+b272fdef5.1.17-1.module_el8.3.0+2009+b272fdef -
< 5.1.17-1.module_el8.4.0+2229+b272fdef5.1.17-1.module_el8.4.0+2229+b272fdef -
< 5.1.17-1.module_el8.5.0+152+112d3b8c5.1.17-1.module_el8.5.0+152+112d3b8c
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the apcu-panel package in AlmaLinux 8 is vulnerable to a code execution or unauthorized access vulnerability. It is recommended to update to the latest version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for apcu-panel →
FAQ
This vulnerability could potentially allow an attacker to execute arbitrary code or gain unauthorized access to sensitive information.
Versions 0 to 5.1.17-1.module_el8.4.0+2229+b272fdef are affected.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability.
Yes, a patch is available in version 5.1.17-1.module_el8.5.0+152+112d3b8c or later.
You can find more information about this vulnerability in the AlmaLinux Release Notes linked in the References section.
References
Related vulnerabilities
Recent vulnerabilities recorded for apcu-panel.
