Critical Security Advisory Updates: Linux Kernel, Expat, PHP Systems

Mar 04, 2022 •

1 - 2 min read

Happy Friday fellow Linux geeks! This week, important updates have been issued for the Linux kernel, Expat and PHP. Read on to learn about these vulnerabilities and how to secure your system against them.

Now you can personalize your LinuxSecurity.com User Profile to include the latest advisories for the distros you select, making it easier than ever to keep your system up-to-date and secure.

Have a question about or comment on one of the vulnerabilities highlighted in today's newsletter? Let's discuss!

Yours in Open Source,

Brittany Signature 150 Esm W150

Linux Kernel

The Discovery

Several security issues have been found in the Linux kernel, the most critical being a remotely exploitable stack-based buffer overflow in the Transparent Inter-Process Communication (TIPC) protocol implementation in the kernel.

The Impact

Exploitation of these Linux kernel vulnerabilities could result in denial of service (DoS), privilege escalation attacks and the exposure of sensitive information (kernel memory).

The Fix

These flaws have been fixed in the Linux kernel. Patch now to protect the security integrity, and availability of your systems.

Your Related Advisories:

[distro_list_1]

Expat

The Discovery

Multiple vulnerabilities have been discovered in Expat, an XML parsing C library (CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314 and CVE-2022-25315).
Expat Esm W225

The Impact

These issues could lead to denial of service (DoS) or potentially the execution of arbitrary code, if a malformed XML file is processed.

The Fix

An Expat security update fixes these vulnerabilities. We recommend updating as soon as possible to mitigate your risk.

Your Related Advisories:

[distro_list_2]

PHP

The Discovery

Several PHP security issues have been discovered. It was found that PHP incorrectly handled certain scripts and certain inputs (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9119, CVE-2017-9120 and CVE-2021-21707).