A php:7.4 security update has been released for AlmaLinux 8.
ALSA-2022:6542 Moderate: php:7.4 security update
Type:
security
Severity:
moderate
Release date:
2022-10-14
Description
Security Fix(es):
* Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948)
* Archive_Tar: improper filename sanitization leads to file overwrites (CVE-2020-28949)
* Archive_Tar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
RHSA-2022:6542
CVE-2020-28948
CVE-2020-28949
CVE-2020-36193
ALSA-2022:6542
Updates packages:
php-pear-1.10.13-1.module_el8.6.0+3268+b150a051.noarch.rpm
apcu-panel-5.1.18-1.module_el8.6.0+2750+78feabcb.noarch.rpm
php-xmlrpc-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-json-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-dba-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-soap-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-mysqlnd-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-pgsql-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-mbstring-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-gd-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-pecl-apcu-5.1.18-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
php-process-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-pdo-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-enchant-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-pecl-apcu-devel-5.1.18-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
php-ldap-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-ffi-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
libzip-1.6.1-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
php-bcmath-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-xml-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-common-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-fpm-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
libzip-tools-1.6.1-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
php-opcache-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-embedded-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-odbc-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-intl-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-pecl-xdebug-2.9.5-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
php-devel-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-snmp-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-cli-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-gmp-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-pecl-rrd-2.0.1-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
php-dbg-7.4.19-4.module_el8.6.0+3238+624bf8b8.x86_64.rpm
php-pecl-zip-1.18.2-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
libzip-devel-1.6.1-1.module_el8.6.0+2750+78feabcb.x86_64.rpm
php-pecl-zip-1.18.2-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-gd-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-dbg-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-process-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-mysqlnd-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-bcmath-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-xml-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-pecl-apcu-devel-5.1.18-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-ldap-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-embedded-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-json-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-intl-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-common-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
libzip-tools-1.6.1-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-gmp-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-pgsql-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-dba-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-ffi-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-opcache-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-enchant-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-pdo-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-pecl-apcu-5.1.18-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-xmlrpc-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-devel-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
libzip-devel-1.6.1-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-pecl-rrd-2.0.1-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-pecl-xdebug-2.9.5-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-fpm-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-odbc-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-cli-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-snmp-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
libzip-1.6.1-1.module_el8.6.0+2750+78feabcb.aarch64.rpm
php-soap-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-mbstring-7.4.19-4.module_el8.6.0+3238+624bf8b8.aarch64.rpm
php-dbg-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-gd-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-process-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-json-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-mysqlnd-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-intl-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-embedded-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-odbc-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-snmp-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-pecl-apcu-5.1.18-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
php-bcmath-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-pecl-rrd-2.0.1-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
php-ldap-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-devel-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-ffi-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
libzip-devel-1.6.1-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
libzip-1.6.1-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
libzip-tools-1.6.1-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
php-pecl-xdebug-2.9.5-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
php-common-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-dba-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-pecl-zip-1.18.2-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
php-mbstring-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-pdo-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-pecl-apcu-devel-5.1.18-1.module_el8.6.0+2750+78feabcb.ppc64le.rpm
php-xml-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-xmlrpc-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-soap-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-gmp-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-fpm-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-pgsql-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-enchant-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-cli-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-opcache-7.4.19-4.module_el8.6.0+3238+624bf8b8.ppc64le.rpm
php-embedded-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-enchant-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-dbg-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-cli-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-pecl-apcu-devel-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-common-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-xmlrpc-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-opcache-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-dba-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-json-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
libzip-tools-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-pecl-rrd-2.0.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-ldap-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-process-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-pecl-apcu-5.1.18-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-snmp-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-pgsql-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-pecl-zip-1.18.2-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-gd-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-soap-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-pecl-xdebug-2.9.5-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-devel-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
libzip-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-fpm-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-mbstring-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
libzip-devel-1.6.1-1.module_el8.6.0+3239+bedf0508.s390x.rpm
php-bcmath-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-ffi-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-xml-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-gmp-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-pdo-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-mysqlnd-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-odbc-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
php-intl-7.4.19-4.module_el8.6.0+3239+bedf0508.s390x.rpm
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
