Amazon Linux 1 (EOL) Security Advisory: ALAS-2023-1673
Advisory Released Date: 2023-01-24
Advisory Updated Date: 2023-01-24
Severity:
Critical
Issue Overview:
PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. (CVE-2022-26635)
Affected Packages:
php70-pecl-memcached
Issue Correction:
Run yum update php70-pecl-memcached to update your system.
New Packages:
i686:
php70-pecl-memcached-3.2.0-1.3.amzn1.i686
php70-pecl-memcached-debuginfo-3.2.0-1.3.amzn1.i686
src:
php70-pecl-memcached-3.2.0-1.3.amzn1.src
x86_64:
php70-pecl-memcached-3.2.0-1.3.amzn1.x86_64
php70-pecl-memcached-debuginfo-3.2.0-1.3.amzn1.x86_64