VDB

ALSA-2024%3A10952

ALSA-2024%3A10952 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from OSV · Published December 11, 2024

Moderate: php:7.4 security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
php-pecl-rrdAlmaLinux:82.0.1-1.module_el8.6.0+3059+d65eee13, 2.0.1-1.module_el8.6.0+2750+78feabcb, 2.0.1-1.module_el8.4.0+2229+b272fdef, 2.0.1-1.module_el8.3.0+2009+b272fdef
php-soapAlmaLinux:87.4.33-2.module_el8.10.0+3935+28808425
php-bcmathAlmaLinux:87.4.33-2.module_el8.10.0+3935+28808425
php-mysqlndAlmaLinux:87.4.33-2.module_el8.10.0+3935+28808425
libzip-develAlmaLinux:81.6.1-1.module_el8.10.0+3935+28808425, 1.6.1-1.module_el8.6.0+3239+bedf0508
php-pecl-apcu-develAlmaLinux:85.1.18-1.module_el8.10.0+3935+28808425, 5.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-xdebugAlmaLinux:82.9.5-1.module_el8.10.0+3935+28808425, 2.9.5-1.module_el8.6.0+3239+bedf0508, 2.9.5-1.module_el8.6.0+2750+78feabcb
php-pdoAlmaLinux:87.4.33-2.module_el8.10.0+3935+28808425
php-processAlmaLinux:87.4.33-2.module_el8.10.0+3935+28808425
php-snmpAlmaLinux:87.4.33-2.module_el8.10.0+3935+28808425
php-pecl-zipAlmaLinux:81.18.2-1.module_el8.10.0+3935+28808425, 1.18.2-1.module_el8.6.0+3239+bedf0508, 1.18.2-1.module_el8.6.0+2750+78feabcb
php-ffiAlmaLinux:87.4.33-2.module_el8.10.0+3935+28808425

25 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
AlmaLinux:8php-soap0
AlmaLinux:8php-bcmath0
AlmaLinux:8php-mysqlnd0
AlmaLinux:8php-pecl-xdebug0, 0, 0
AlmaLinux:8php-pdo0
AlmaLinux:8php-snmp0
AlmaLinux:8libzip-devel0, 0
AlmaLinux:8php-ffi0
AlmaLinux:8php-pecl-zip0, 0, 0
AlmaLinux:8php-gd0
AlmaLinux:8php-devel0
AlmaLinux:8php-enchant0
AlmaLinux:8php-gmp0
AlmaLinux:8php-cli0
AlmaLinux:8php-common0
AlmaLinux:8php-intl0
AlmaLinux:8php-json0
AlmaLinux:8php-process0
AlmaLinux:8php-dba0
AlmaLinux:8php-pear0

…and 17 more

Timeline

  • Dec 11, 2024 CVE Published
  • Mar 12, 2026 Distribution Patch (2 in total, the first dated here)
  • Mar 12, 2026 Security Advisory
  • Oct 29, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ALSA-2024%3A10952
vulnetix vdb fixes ALSA-2024%3A10952

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ALSA-2024%253A10952/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 4 more

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›