CVE-2020-36193

Debian Bug report logs - #980428 Disallow symlinks to out-of-path filenames (CVE-2020-36193) Package: php-pear; Maintainer for php-pear is Debian PHP Maintainers <team+pkg-php@trackerdebianorg>; Source for php-pear is src:php-pear (PTS, buildd, popcon) Reported by: David Prévot <taffit@debianorg> Date: Tue, 19 Ja ...

It was discovered that the PEAR Archive_Tar package for handling tar files in PHP is prone to a directory traversal flaw due to inadequate checking of symbolic links For the stable distribution (buster), this problem has been fixed in version 1:1106+submodules+notgz-11+deb10u2 We recommend that you upgrade your php-pear packages For the detai ...

Synopsis Moderate: php:74 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the php:74 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as ...

Synopsis Moderate: php-pear security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for php-pear is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a ...

Synopsis Moderate: php:74 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the php:74 module is now available for Red Hat Enterprise Linux 84 Extended Update SupportRed Hat Product Security ...

Tarphp in Archive_Tar through 1411 allows write operations with Directory Traversal due to inadequate checking of symbolic links (CVE-2020-36193) ...

Tarphp in Archive_Tar through 1411 allows write operations with Directory Traversal due to inadequate checking of symbolic links (<a href="nvdnistgov/vuln/detail/CVE%2D2020%2D36193">cve-2020-36193</a>) ...

Tarphp in Archive_Tar through 1411 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948 ...