Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3006-1

Опубликовано: 09 сент. 2021
Источник: suse-cvrf

Описание

Security update for php74-pear

This update for php74-pear fixes the following issues:

  • CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).

Список пакетов

SUSE Linux Enterprise Module for Web and Scripting 12
php74-pear-1.10.21-1.6.1
php74-pecl-1.10.21-1.6.1

Ссылки

Описание

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Затронутые продукты
SUSE Linux Enterprise Module for Web and Scripting 12:php74-pear-1.10.21-1.6.1
SUSE Linux Enterprise Module for Web and Scripting 12:php74-pecl-1.10.21-1.6.1
Ссылки