RLSA-2022:6542

Опубликовано: 15 сент. 2022

Источник: rocky

Оценка: Moderate

Описание

Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)
Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)
Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 8

Наименование	Архитектура	Релиз	RPM
apcu-panel	noarch	1.module+el8.6.0+789+2130c178	apcu-panel-5.1.18-1.module+el8.6.0+789+2130c178.noarch.rpm
apcu-panel	noarch	1.module+el8.4.0+415+e936cba3	apcu-panel-5.1.18-1.module+el8.4.0+415+e936cba3.noarch.rpm
libzip	aarch64	1.module+el8.6.0+789+2130c178	libzip-1.6.1-1.module+el8.6.0+789+2130c178.aarch64.rpm
libzip	aarch64	1.module+el8.4.0+415+e936cba3	libzip-1.6.1-1.module+el8.4.0+415+e936cba3.aarch64.rpm
libzip-devel	aarch64	1.module+el8.6.0+789+2130c178	libzip-devel-1.6.1-1.module+el8.6.0+789+2130c178.aarch64.rpm
libzip-devel	aarch64	1.module+el8.4.0+415+e936cba3	libzip-devel-1.6.1-1.module+el8.4.0+415+e936cba3.aarch64.rpm
libzip-tools	aarch64	1.module+el8.6.0+789+2130c178	libzip-tools-1.6.1-1.module+el8.6.0+789+2130c178.aarch64.rpm
libzip-tools	aarch64	1.module+el8.4.0+415+e936cba3	libzip-tools-1.6.1-1.module+el8.4.0+415+e936cba3.aarch64.rpm
php	aarch64	4.module+el8.6.0+1006+0d5a469f	php-7.4.19-4.module+el8.6.0+1006+0d5a469f.aarch64.rpm
php-bcmath	aarch64	4.module+el8.6.0+1006+0d5a469f	php-bcmath-7.4.19-4.module+el8.6.0+1006+0d5a469f.aarch64.rpm