Summary
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
Security Fix(es):
* Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)
* Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)
* Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | libzip | 0:1.6.1-1.module+el8.6.0+789+2130c178 |
| Rocky Linux · 8 | libzip | 0:1.6.1-1.module+el8.4.0+415+e936cba3 |
| Rocky Linux · 8 | php | 0:7.4.19-4.module+el8.6.0+1006+0d5a469f |
| Rocky Linux · 8 | php-pear | 1:1.10.13-1.module+el8.7.0+1067+0a7071cc |
| Rocky Linux · 8 | php-pear | 1:1.10.13-1.module+el8.6.0+1006+0d5a469f |
| Rocky Linux · 8 | php-pecl-apcu | 0:5.1.18-1.module+el8.6.0+789+2130c178 |
| Rocky Linux · 8 | php-pecl-apcu | 0:5.1.18-1.module+el8.4.0+415+e936cba3 |
| Rocky Linux · 8 | php-pecl-rrd | 0:2.0.1-1.module+el8.4.0+414+2e7afcdd |
| Rocky Linux · 8 | php-pecl-xdebug | 0:2.9.5-1.module+el8.4.0+415+e936cba3 |
| Rocky Linux · 8 | php-pecl-zip | 0:1.18.2-1.module+el8.6.0+789+2130c178 |
| Rocky Linux · 8 | php-pecl-zip | 0:1.18.2-1.module+el8.4.0+415+e936cba3 |
Vulnerabilities 3
-
High 7.8
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrappe…
KEV Aug 25, 2022 -
High 7.5
Directory Traversal in Archive_Tar
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
KEV Aug 25, 2022 -
High 7.8
Multiple vulnerabilities through filename manipulation in Archive_Tar
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.