Skip to content
OpenAdvisories
Medium 2 exploited CVEs ALSA-2022:6542 3 CVEs

Moderate: php:7.4 security update

Published Sep 15, 2022 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)
* Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)
* Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 72

ReleasePackageFixed in
AlmaLinux · 8 apcu-panel 5.1.18-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 libzip 1.6.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 libzip 1.6.1-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 libzip-devel 1.6.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 libzip-devel 1.6.1-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 libzip-tools 1.6.1-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 libzip-tools 1.6.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 php 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-bcmath 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-bcmath 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-cli 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-cli 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-common 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-common 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-dba 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-dba 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-dbg 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-dbg 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-devel 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-devel 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-embedded 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-embedded 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-enchant 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-enchant 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-ffi 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-ffi 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-fpm 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-fpm 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-gd 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-gd 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-gmp 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-gmp 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-intl 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-intl 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-json 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-json 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-ldap 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-ldap 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-mbstring 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-mbstring 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-mysqlnd 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-mysqlnd 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-odbc 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-odbc 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-opcache 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-opcache 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-pdo 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-pdo 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-pear 1:1.10.13-1.module_el8.6.0+3268+b150a051
AlmaLinux · 8 php-pecl-apcu 5.1.18-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 php-pecl-apcu 5.1.18-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-pecl-apcu-devel 5.1.18-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-pecl-apcu-devel 5.1.18-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 php-pecl-rrd 2.0.1-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 php-pecl-rrd 2.0.1-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-pecl-xdebug 2.9.5-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-pecl-xdebug 2.9.5-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 php-pecl-zip 1.18.2-1.module_el8.6.0+2750+78feabcb
AlmaLinux · 8 php-pecl-zip 1.18.2-1.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-pgsql 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-pgsql 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-process 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-process 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-snmp 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-snmp 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-soap 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-soap 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-xml 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-xml 7.4.19-4.module_el8.6.0+3239+bedf0508
AlmaLinux · 8 php-xmlrpc 7.4.19-4.module_el8.6.0+3238+624bf8b8
AlmaLinux · 8 php-xmlrpc 7.4.19-4.module_el8.6.0+3239+bedf0508

Vulnerabilities 3

References

  • report
    https://access.redhat.com/security/cve/CVE-2020-28948
  • report
    https://access.redhat.com/security/cve/CVE-2020-28949
  • report
    https://access.redhat.com/security/cve/CVE-2020-36193
  • report
    https://bugzilla.redhat.com/1904001
  • report
    https://bugzilla.redhat.com/1910323
  • report
    https://bugzilla.redhat.com/1942961
  • advisory
    https://errata.almalinux.org/8/ALSA-2022-6542.html