Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbaUpgrade php-pearUpgrade php-develUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-processUpgrade php-fpmUpgrade php-pecl-apcu-develUpgrade php-xmlUpgrade php-pecl-xdebugUpgrade php-commonUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-cliUpgrade php-intlUpgrade apcu-panelUpgrade php-odbcUpgrade php-soapUpgrade php-gdUpgrade php-ffiUpgrade libzip-develUpgrade php-snmpUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-mysqlndUpgrade php-bcmathUpgrade php-pdoUpgrade phpUpgrade php-opcacheUpgrade php-ldapUpgrade php-dbgUpgrade php-jsonUpgrade php-embeddedUpgrade php-gmpUpgrade php-pecl-apcuUpgrade libzip | Oct 20, 2022 | Nov 19, 2020 |
| Alpine Linux | — | Upgrade drupal7 | Aug 22, 2024 | Nov 19, 2020 |
| Amazon Linux Ami 2 | — | Upgrade php-pear | Jan 8, 2021 | Nov 19, 2020 |
| Amazon_linux | — | Upgrade php7-pear | Jan 15, 2021 | Nov 19, 2020 |
| Centos_linux | — | Upgrade php-odbc-debuginfoUpgrade php-enchant-debuginfoUpgrade php-xml-debuginfoUpgrade php-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade php-ffi-debuginfoUpgrade libzip-debuginfoUpgrade php-gmpUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-pgsqlUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcuUpgrade php-pdoUpgrade php-odbcUpgrade php-json-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-dbaUpgrade php-soapUpgrade php-commonUpgrade php-intlUpgrade php-pecl-xdebug-debuginfoUpgrade php-fpm-debuginfoUpgrade php-jsonUpgrade php-pecl-xdebug-debugsourceUpgrade php-ldapUpgrade php-pecl-zip-debuginfoUpgrade php-cliUpgrade php-pecl-rrd-debugsourceUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-processUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-embedded-debuginfoUpgrade php-ffiUpgrade php-soap-debuginfoUpgrade php-pecl-zipUpgrade libzip-develUpgrade php-pecl-xdebugUpgrade php-mysqlndUpgrade phpUpgrade apcu-panelUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-intl-debuginfoUpgrade php-bcmathUpgrade php-snmpUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-xmlUpgrade php-pgsql-debuginfoUpgrade php-pecl-rrdUpgrade php-ldap-debuginfoUpgrade php-gdUpgrade php-dbg-debuginfoUpgrade php-snmp-debuginfoUpgrade php-embeddedUpgrade php-opcacheUpgrade php-gd-debuginfoUpgrade libzip-toolsUpgrade php-fpmUpgrade php-develUpgrade php-debugsourceUpgrade libzip-tools-debuginfoUpgrade php-pearUpgrade php-bcmath-debuginfo | Oct 20, 2022 | Nov 19, 2020 |
| Debian | — | Upgrade php-pear | Nov 24, 2020 | Nov 19, 2020 |
| Drupal | — | Upgrade to drupal version 9.0.9Upgrade to drupal version 8.9.1Upgrade to drupal version 7.75Upgrade to drupal version 8.8.1 | Nov 27, 2020 | Nov 19, 2020 |
| Gentoo Linux | — | Upgrade dev-php/PEAR-Archive_Tar. | Jan 26, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-pear | Feb 22, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-pear | Jan 20, 2021 | Nov 19, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade php-pear | Feb 2, 2021 | Nov 19, 2020 |
| Oracle Solaris | — | Upgrade web/php-74 to version 7.4.15-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-73 to version 7.3.27-11.4.32.0.1.88.2 on Solaris 11.4Upgrade web/php-80 to version 8.0.2-11.4.33.0.1.94.0 on Solaris 11.4 | Apr 21, 2021 | Nov 19, 2020 |
| Oracle_linux | — | Upgrade php-dbgUpgrade php-ldapUpgrade php-ffiUpgrade php-bcmathUpgrade php-intlUpgrade php-fpmUpgrade php-develUpgrade php-pecl-apcuUpgrade php-commonUpgrade php-pgsqlUpgrade libzip-develUpgrade php-snmpUpgrade php-odbcUpgrade php-xmlUpgrade phpUpgrade apcu-panelUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-enchantUpgrade php-processUpgrade php-pdoUpgrade php-jsonUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-pecl-xdebugUpgrade php-opcacheUpgrade php-mbstringUpgrade php-gmpUpgrade php-pecl-zipUpgrade php-dbaUpgrade libzipUpgrade php-pearUpgrade php-mysqlndUpgrade php-xmlrpcUpgrade php-embeddedUpgrade php-soapUpgrade php-gd | Sep 17, 2022 | Nov 19, 2020 |
| Redhat_linux | — | Upgrade php-pgsqlUpgrade php-jsonUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-snmp-debuginfoUpgrade php-debugsourceUpgrade php-embeddedUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-ffi-debuginfoUpgrade php-develUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php-ldap-debuginfoUpgrade php-gmpUpgrade php-gdUpgrade php-pdoUpgrade php-cli-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pecl-zipUpgrade php-enchantUpgrade php-pecl-zip-debugsourceUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-soapUpgrade php-xmlrpcUpgrade php-intlUpgrade php-xmlrpc-debuginfoUpgrade php-dbg-debuginfoUpgrade php-fpm-debuginfoUpgrade php-processUpgrade php-embedded-debuginfoUpgrade php-odbc-debuginfoUpgrade php-intl-debuginfoUpgrade php-dbaUpgrade php-gd-debuginfoUpgrade php-pdo-debuginfoUpgrade libzipUpgrade php-bcmathUpgrade php-odbcUpgrade php-pgsql-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-fpmUpgrade apcu-panelUpgrade php-dba-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ldapUpgrade php-pecl-xdebugUpgrade libzip-develNo solution existsUpgrade php-bcmath-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-ffiUpgrade php-snmpUpgrade libzip-debuginfoUpgrade libzip-toolsUpgrade php-mysqlndUpgrade php-pecl-rrd-debugsourceUpgrade php-xmlUpgrade php-enchant-debuginfoUpgrade php-debuginfoUpgrade php-json-debuginfoUpgrade php-soap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-cliUpgrade php-pearUpgrade php-opcacheUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-dbgUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-mbstringUpgrade php-pecl-apcu | Oct 20, 2022 | Nov 19, 2020 |
| Rocky_linux | — | Upgrade libzip-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-rrdUpgrade libzip-tools-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-commonUpgrade php-xmlrpcUpgrade php-develUpgrade php-enchant-debuginfoUpgrade php-odbcUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-cli-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-json-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pdoUpgrade php-opcache-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-jsonUpgrade libzip-debugsourceUpgrade php-pdo-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebugUpgrade php-soapUpgrade php-common-debuginfoUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-pecl-apcuUpgrade php-processUpgrade php-fpmUpgrade php-gmpUpgrade php-dbaUpgrade php-dba-debuginfoUpgrade php-mbstringUpgrade php-pecl-xdebug-debugsourceUpgrade php-embeddedUpgrade php-snmp-debuginfoUpgrade php-snmpUpgrade php-ldap-debuginfoUpgrade php-gd-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mysqlndUpgrade php-ffiUpgrade php-bcmath-debuginfoUpgrade libzip-toolsUpgrade libzipUpgrade php-debuginfoUpgrade php-ldapUpgrade php-process-debuginfoUpgrade libzip-develUpgrade php-gmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intlUpgrade phpUpgrade php-pecl-rrd-debugsourceUpgrade php-opcacheUpgrade php-embedded-debuginfoUpgrade php-dbgUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-xmlUpgrade php-cliUpgrade php-debugsourceUpgrade php-ffi-debuginfoUpgrade php-enchantUpgrade php-pecl-apcu-debuginfo | Mar 12, 2024 | Nov 19, 2020 |
| Ubuntu | — | Upgrade php-pearUpgrade drupal7 (Ubuntu Pro) | Dec 2, 2020 | Nov 19, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub