p PatchFirst

ALSA-2022:6542

ALSA-2022:6542 · Moderate: php:7.4 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948) * Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949) * Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • apcu-panel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 5.1.18-1.module_el8.6.0+2750+78feabcb

    Update to 5.1.18-1.module_el8.6.0+2750+78feabcb

  • libzip AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb

    Update to 1.6.1-1.module_el8.6.0+2750+78feabcb

  • libzip AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+3239+bedf0508

    Update to 1.6.1-1.module_el8.6.0+3239+bedf0508

  • libzip-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb

    Update to 1.6.1-1.module_el8.6.0+2750+78feabcb

  • libzip-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+3239+bedf0508

    Update to 1.6.1-1.module_el8.6.0+3239+bedf0508

  • libzip-tools AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+3239+bedf0508

    Update to 1.6.1-1.module_el8.6.0+3239+bedf0508

  • libzip-tools AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 1.6.1-1.module_el8.6.0+2750+78feabcb

    Update to 1.6.1-1.module_el8.6.0+2750+78feabcb

  • php AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-bcmath AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php-bcmath AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-cli AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-cli AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-common AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php-dba AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php-dba AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-dbg AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php-dbg AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php-devel AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-embedded AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

  • php-embedded AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3238+624bf8b8

    Update to 7.4.19-4.module_el8.6.0+3238+624bf8b8

  • php-enchant AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 7.4.19-4.module_el8.6.0+3239+bedf0508

    Update to 7.4.19-4.module_el8.6.0+3239+bedf0508

Original sources

Check your server →