Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
98
security advisorymoderateupdateRed Hat Enterprise Linux 8.4 RHSA-2022-6541-01 Moderate PHP Update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: php:7.4 security update Advisory ID: RHSA-2022:6541-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:6541 Issue date: 2022-09-15 CVE Names: CVE-2020-28948 CVE-2020-28949 CVE-2020-36193 ==================================================================== 1. Summary: An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.8.4) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948) * Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949) * Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1904001 - CVE-2020-28948 Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked 1910323 - CVE-2020-28949 Archive_Tar: improper filename sanitization leads to file overwrites 1942961 - CVE-2020-36193 Archive_Tar: directory traversal due to inadequate checking of symbolic links 6. Package List: Red Hat Enterprise Linux AppStream EUS(v.8.4): Source: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src.rpm php-7.4.6-5.module+el8.4.0+15727+276bb227.src.rpm php-pear-1.10.13-1.module+el8.4.0+16578+ed65e99e.src.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.src.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.src.rpm aarch64: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-bcmath-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-bcmath-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-cli-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-cli-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-common-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-common-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-dba-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-dba-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-dbg-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-dbg-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-debugsource-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-devel-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-embedded-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-embedded-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-enchant-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-enchant-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-ffi-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-ffi-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-fpm-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-fpm-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-gd-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-gd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-gmp-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-gmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-intl-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-intl-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-json-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-json-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-ldap-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-ldap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-mbstring-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-mbstring-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-mysqlnd-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-mysqlnd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-odbc-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-odbc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-opcache-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-opcache-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-pdo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-pdo-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.aarch64.rpm php-pgsql-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-pgsql-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-process-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-process-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-snmp-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-snmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-soap-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-soap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-xml-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-xml-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-xmlrpc-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm php-xmlrpc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.aarch64.rpm noarch: apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch.rpm php-pear-1.10.13-1.module+el8.4.0+16578+ed65e99e.noarch.rpm ppc64le: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-bcmath-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-bcmath-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-cli-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-cli-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-common-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-common-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-dba-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-dba-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-dbg-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-dbg-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-debugsource-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-devel-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-embedded-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-embedded-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-enchant-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-enchant-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-ffi-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-ffi-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-fpm-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-fpm-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-gd-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-gd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-gmp-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-gmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-intl-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-intl-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-json-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-json-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-ldap-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-ldap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-mbstring-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-mbstring-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-mysqlnd-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-mysqlnd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-odbc-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-odbc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-opcache-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-opcache-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-pdo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-pdo-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.ppc64le.rpm php-pgsql-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-pgsql-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-process-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-process-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-snmp-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-snmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-soap-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-soap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-xml-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-xml-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-xmlrpc-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm php-xmlrpc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.ppc64le.rpm s390x: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-bcmath-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-bcmath-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-cli-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-cli-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-common-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-common-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-dba-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-dba-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-dbg-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-dbg-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-debugsource-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-devel-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-embedded-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-embedded-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-enchant-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-enchant-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-ffi-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-ffi-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-fpm-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-fpm-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-gd-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-gd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-gmp-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-gmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-intl-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-intl-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-json-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-json-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-ldap-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-ldap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-mbstring-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-mbstring-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-mysqlnd-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-mysqlnd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-odbc-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-odbc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-opcache-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-opcache-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-pdo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-pdo-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.s390x.rpm php-pgsql-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-pgsql-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-process-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-process-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-snmp-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-snmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-soap-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-soap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-xml-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-xml-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-xmlrpc-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm php-xmlrpc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.s390x.rpm x86_64: libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-debugsource-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-devel-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-tools-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm libzip-tools-debuginfo-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-bcmath-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-bcmath-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-cli-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-cli-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-common-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-common-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-dba-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-dba-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-dbg-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-dbg-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-debugsource-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-devel-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-embedded-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-embedded-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-enchant-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-enchant-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-ffi-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-ffi-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-fpm-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-fpm-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-gd-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-gd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-gmp-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-gmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-intl-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-intl-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-json-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-json-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-ldap-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-ldap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-mbstring-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-mbstring-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-mysqlnd-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-mysqlnd-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-odbc-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-odbc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-opcache-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-opcache-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-pdo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-pdo-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-pecl-apcu-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-debuginfo-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-debugsource-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-debuginfo-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-rrd-debugsource-2.0.1-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-debuginfo-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-xdebug-debugsource-2.9.5-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-debuginfo-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pecl-zip-debugsource-1.18.2-1.module+el8.3.0+6678+b09f589e.x86_64.rpm php-pgsql-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-pgsql-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-process-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-process-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-snmp-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-snmp-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-soap-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-soap-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-xml-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-xml-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-xmlrpc-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm php-xmlrpc-debuginfo-7.4.6-5.module+el8.4.0+15727+276bb227.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2020-28948 https://access.redhat.com/security/cve/CVE-2020-28949 https://access.redhat.com/security/cve/CVE-2020-36193 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYyWNodzjgjWX9erEAQhW7Q//V7Hol4et6Ohc7tyFxWOGeWYxA43Qchg7 baSBgUyy0D23qNCMEd6KoN2eLHK/bPQBGLfK8qv4kp8gYeBQaVxe2d8RGX0v75Ys wNlxP3P8dAee7QxyKJpcUUg17nsqix2yV5ONjQaIbY9MVW555+DvTzwGIjy5WCrK Ji60NQ9TOOwsT9+CfFe+NmVeyndge6n75iXNCGd+Xxp4KxE1YDgHq+xx6svrw6gM Tbm0W9NSwR46bbuwaCFcGe2XIW+GufVPzDKP4a253aTzI3Xg6GaAvQuVUAoeo2/P IwICX0ls1GKhc6Tl5qY9mPIM+MKksULAi214L4imY3AiN9v9hv2y6ftLEIZ3MxH/ VW3iKybNwpd0rx2X1j+TQwH80EHZmrSUUjfvMXb92Q46bO/JJBMVkt8PuX6j0a1s h+sYSQvr+XT0lNoUrN4txlXIQXXZy1SfJ19gcm+KqiNIg1nma0UKU8ISn288hF4O dxuQNy8egL5tF6lkr4CJiLAHfF7r8f5JUR+re7yfT5rlXGDhWOgIWByUrrV/XFnn QO0iVLoWTjqXTgNw9C2nTXO5lSfthRFXZR2Zi1+bvmzKNzaU4P8VoOS7eUy9sf9k LYj6ntasSYM9P/q5tMyM+/tepQ9SQYMqeMqhYbzG+tQ9lkqQfigwa8dpjnvVnw+i Wb+/j9KqbcM=txgG -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 17, 2022
•Important
Red Hat
197
security advisorysecurity updatedebianDebian 9: DLA-2721-1 Critical: Drupal7 Archive_Tar Security Issue
The Drupal project uses the pear Archive_Tar library, which has released a security update that impacts Drupal. The vulnerability is mitigated by the fact that Drupal core's use of . ------------------------------------------------------------------------- Debian LTS Advisory DLA-2721-1
Jul 26, 2021
•Critical
Debian LTS
200
security advisorymoderatedirectory traversalScientific Linux SL7: SLSA-2019-2097-1 Addressing Archive-Tar Vulnerability
perl: Directory traversal in Archive::Tar (CVE-2018-12015) SL7 x86_64 perl-Archive-Tar-1.92-3.el7.noarch.rpm noarch perl-Archive-Tar-1.92-3.el7.noarch.rpm - Scientific Linux Development Team. Synopsis: Moderate: perl-Archive-Tar security update Advisory ID: SLSA-2019:2097-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-12015 -- Security Fix(es): * perl: Directory traversal in Archive::Tar (CVE-2018-12015) -- SL7 x86_64 perl-Archive-Tar-1.92-3.el7.noarch.rpm noarch perl-Archive-Tar-1.92-3.el7.noarch.rpm - Scientific Linux Development Team . This advisory highlights the critical update of perl-Archive-Tar on Scientific Linux SL7 due to a severe directory traversal vulnerability that demands immediate action. perl Archive Tar, directory traversal, Scientific Linux advisory, security update, Software Fix. . LinuxSecurity.com Team
Aug 26, 2019
Scientific Linux
87
security advisorymoderatesoftware updateDebian: DSA-4226-1 Moderate: Archive::Tar Directory Issue
Jakub Wilk discovered a directory traversal flaw in the Archive::Tar module, allowing an attacker to overwrite any file writable by the extracting user via a specially crafted tar archive. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4226-1
Jun 12, 2018
Debian
91
security advisorygentoodirectory traversalGentoo GLSA 201702-32: Ruby Archive::Tar::Minitar Normal Directory Risk
Ruby Archive::Tar::Minitar is vulnerable to a directory traversal attack.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201702-32 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Ruby Archive::Tar::Minitar: Directory traversal Date: February 22, 2017 Bugs: #607110 ID: 201702-32 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Ruby Archive::Tar::Minitar is vulnerable to a directory traversal attack. Background ========= Archive::Tar::Minitar is a pure-Ruby library and command-line utility that provides the ability to deal with POSIX tar(1) archive files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-ruby/archive-tar-minitar < 0.6.1 > = 0.6.1 Description ========== Michal Marek discovered that Ruby Archive::Tar::Minitar is vulnerable to a directory traversal vulnerability. Impact ===== A remote attacker could entice a user or an automated system to process a specially crafted archive using Ruby Archive::Tar::Minitar possibly allowing the writing of arbitrary files with the privileges of the process. Workaround ========= There is no known workaround at this time. Resolution ========= All Ruby Archive::Tar::Minitar users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v "> =dev-ruby/archive-tar-minitar-0.6.1" References ========= [ 1 ] CVE-2016-10173 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-10173 Availability =========== This GLSA and any updates to it areavailable for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201702-32 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Feb 22, 2017
Gentoo
91
security advisorygentoodirectory traversalGentoo: 202312-01 Security: Archive::Tar Path Manipulation Vulnerability
A directory traversal vulnerability has been discovered in Archive::Tar.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200812-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Archive::Tar: Directory traversal vulnerability Date: December 10, 2008 Bugs: #192989 ID: 200812-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A directory traversal vulnerability has been discovered in Archive::Tar. Background ========= Archive::Tar is a Perl module for creation and manipulation of tar files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 perl-core/Archive-Tar < 1.40 > = 1.40 Description ========== Jonathan Smith of rPath reported that Archive::Tar does not check for ".." in file names. Impact ===== A remote attacker could entice a user or automated system to extract a specially crafted tar archive, overwriting files at arbitrary locations outside of the specified directory. Workaround ========= There is no known workaround at this time. Resolution ========= All Archive::Tar users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =perl-core/Archive-Tar-1.40" References ========= [ 1 ] CVE-2007-4829 https://www.cve.org/CVERecord?id=CVE-2007-4829 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200812-10 Concerns? ======== Security is a primary focus of Gentoo Linux andensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Dec 10, 2008
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!