ALAS2-2021-1708 — Moderate: php-pear security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-32610: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. 1988558: CVE-2021-32610 php-pear: Directory traversal vulnerability

Fixed packages 1

Release	Package	Fixed in
Amazon Linux · 2	php-pear	1:1.10.12-9.amzn2

Vulnerabilities 1

High 7.1

CVE-2021-32610 EPSS 73%

Directory Traversal in Archive_Tar

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

drupal/core drupal7 drupal7 php-pear Debian Ubuntu Alpine Packagist

Jul 27, 2021

References

web
https://alas.aws.amazon.com/cve/html/CVE-2021-32610.html

Moderate: php-pear security update (Amazon Linux 2)

Summary

Fixed packages 1

Vulnerabilities 1

Directory Traversal in Archive_Tar

References