The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-fpmUpgrade php-odbcUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-soapUpgrade php-gdUpgrade php-jsonUpgrade php-bcmathUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-develUpgrade php-gmpUpgrade php-pgsqlUpgrade php-mbstringUpgrade libzipUpgrade php-cliUpgrade phpUpgrade php-snmpUpgrade php-dbgUpgrade php-dbaUpgrade libzip-develUpgrade php-mysqlndUpgrade php-ffiUpgrade php-commonUpgrade php-ldapUpgrade php-processUpgrade libzip-toolsUpgrade php-intlUpgrade php-embeddedUpgrade php-pecl-rrdUpgrade php-xmlUpgrade php-opcacheUpgrade apcu-panel | Oct 20, 2022 | Nov 19, 2020 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Nov 19, 2020 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Jan 8, 2021 | Nov 19, 2020 |
| Amazon_linux | — | Upgrade php7-pear | Jan 15, 2021 | Nov 19, 2020 |
| Centos_linux | — | Upgrade libzip-tools-debuginfoUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pdoUpgrade php-bcmath-debuginfoUpgrade php-processUpgrade php-bcmathUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-xml-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-zipUpgrade libzipUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-ffiUpgrade php-jsonUpgrade php-pdo-debuginfoUpgrade php-embedded-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-ldap-debuginfoUpgrade php-xmlrpcUpgrade php-process-debuginfoUpgrade php-gd-debuginfoUpgrade php-intlUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-gmpUpgrade php-enchantUpgrade libzip-toolsUpgrade php-pecl-apcu-debuginfoUpgrade phpUpgrade apcu-panelUpgrade php-fpm-debuginfoUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-debugsourceUpgrade php-dbg-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-dbgUpgrade php-pecl-apcuUpgrade php-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-snmpUpgrade libzip-develUpgrade php-ffi-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-ldapUpgrade php-fpmUpgrade libzip-debuginfoUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-odbcUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-dba-debuginfoUpgrade php-xmlUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-pearUpgrade php-mysqlndUpgrade php-develUpgrade php-cliUpgrade php-pgsql-debuginfoUpgrade php-pecl-xdebug | Oct 20, 2022 | Nov 19, 2020 |
| Debian | — | Upgrade php-pear | Nov 24, 2020 | Nov 19, 2020 |
| Drupal | — | Upgrade to drupal version 7.75Upgrade to drupal version 9.0.9Upgrade to drupal version 8.8.1Upgrade to drupal version 8.9.1 | Nov 27, 2020 | Nov 19, 2020 |
| Gentoo Linux | — | Upgrade dev-php/PEAR-Archive_Tar. | Jan 26, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Feb 2, 2021 | Nov 19, 2020 |
| Oracle Solaris | — | Upgrade web/php-73 to version 7.3.27-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-74 to version 7.4.15-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-80 to version 8.0.2-11.4.33.0.1.94.0 on Solaris 11.4 | Apr 21, 2021 | Nov 19, 2020 |
| Oracle_linux | — | Upgrade apcu-panelUpgrade php-ffiUpgrade php-pecl-rrdUpgrade php-commonUpgrade phpUpgrade libzip-toolsUpgrade php-cliUpgrade php-odbcUpgrade php-processUpgrade php-intlUpgrade php-dbaUpgrade php-snmpUpgrade php-mysqlndUpgrade php-opcacheUpgrade libzip-develUpgrade php-xmlrpcUpgrade php-jsonUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-embeddedUpgrade php-pgsqlUpgrade php-dbgUpgrade php-xmlUpgrade php-develUpgrade php-enchantUpgrade php-bcmathUpgrade php-pecl-zipUpgrade php-gdUpgrade php-ldapUpgrade libzipUpgrade php-mbstringUpgrade php-gmpUpgrade php-soapUpgrade php-pearUpgrade php-fpm | Sep 17, 2022 | Nov 19, 2020 |
| Redhat_linux | — | Upgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade php-pecl-xdebug-debugsourceUpgrade php-debugsourceUpgrade php-pecl-apcuUpgrade php-common-debuginfoUpgrade php-xml-debuginfoUpgrade php-ldapNo solution existsUpgrade php-dbgUpgrade php-enchant-debuginfoUpgrade php-mbstring-debuginfoUpgrade libzipUpgrade php-mbstringUpgrade php-pecl-xdebug-debuginfoUpgrade php-odbc-debuginfoUpgrade php-gd-debuginfoUpgrade php-enchantUpgrade php-embeddedUpgrade php-pecl-apcu-develUpgrade php-embedded-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-bcmathUpgrade php-ffi-debuginfoUpgrade php-xmlrpcUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-pearUpgrade php-xmlUpgrade php-pecl-zipUpgrade php-develUpgrade php-fpmUpgrade php-mysqlnd-debuginfoUpgrade php-pdoUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-xmlrpc-debuginfoUpgrade apcu-panelUpgrade php-bcmath-debuginfoUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-process-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-rrdUpgrade php-cli-debuginfoUpgrade php-snmpUpgrade php-intl-debuginfoUpgrade php-mysqlndUpgrade php-opcache-debuginfoUpgrade php-json-debuginfoUpgrade php-ffiUpgrade phpUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade libzip-develUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade php-dbaUpgrade php-gdUpgrade php-processUpgrade php-soap-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dba-debuginfoUpgrade php-pgsql-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-dbg-debuginfoUpgrade php-odbcUpgrade php-pgsqlUpgrade libzip-debugsourceUpgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-debuginfoUpgrade php-cli | Oct 20, 2022 | Nov 19, 2020 |
| Rocky_linux | — | Upgrade php-pecl-zipUpgrade php-dbg-debuginfoUpgrade php-pecl-apcuUpgrade php-mbstringUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-odbc-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-processUpgrade php-common-debuginfoUpgrade php-dba-debuginfoUpgrade php-develUpgrade php-mysqlnd-debuginfoUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade php-soapUpgrade php-jsonUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-pdo-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gmpUpgrade php-pdoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebugUpgrade php-xml-debuginfoUpgrade php-pecl-rrdUpgrade php-pecl-rrd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-intlUpgrade php-enchantUpgrade libzip-develUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-cli-debuginfoUpgrade php-cliUpgrade php-opcacheUpgrade php-dbaUpgrade phpUpgrade php-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-json-debuginfoUpgrade php-ffiUpgrade php-bcmath-debuginfoUpgrade libzipUpgrade php-odbcUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-debuginfoUpgrade php-fpm-debuginfoUpgrade php-mysqlndUpgrade php-ldapUpgrade php-embeddedUpgrade php-ffi-debuginfoUpgrade php-debuginfo | Mar 12, 2024 | Nov 19, 2020 |
| Ubuntu | — | Upgrade php-pearUpgrade drupal7 (Ubuntu Pro) | Dec 2, 2020 | Nov 19, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub