Stay Secure with the Latest Linux Advisories

security advisorymoderateupdate

Fedora 33: 2021-dc7de65eed Moderate: Symlink Issue in Archive_Tar

**Archive_Tar 1.4.12** * Fix Bug #27008: Symlink out-of-path write vulnerability (CVE-2020-36193) [mrook]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-dc7de65eed 2021-01-28 01:42:36.157660 --------------------------------------------------------------------------------Name : php-pear Product : Fedora 33 Version : 1.10.12 Release : 5.fc33 URL : https://pear.php.net/package/PEAR Summary : PHP Extension and Application Repository framework Description : PEAR is a framework and distribution system for reusable PHP components. This package contains the basic PEAR components. --------------------------------------------------------------------------------Update Information: **Archive_Tar 1.4.12** * Fix Bug #27008: Symlink out-of-path write vulnerability (CVE-2020-36193) [mrook] --------------------------------------------------------------------------------ChangeLog: * Tue Jan 19 2021 Remi Collet - 1:1.10.12-5 - update Archive_Tar to 1.4.12 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-dc7de65eed' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora 33 has released an update addressing a symlink security vulnerability found in the Archive_Tar package of PEAR. This fix is crucial for maintaining system integrity.. archive_tar update, Fedora 33 security, PEAR vulnerability fix. . LinuxSecurity.com Team

Jan 27, 2021 Fedora