Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-36193: Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | php-pear | 1:1.10.12-5.amzn2 |
Vulnerabilities 1
-
High 7.5
Directory Traversal in Archive_Tar
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
KEV Aug 25, 2022
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-36193.html