RHSA-2022:6541: Moderate: php:7.4 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.Security Fix(es): ArchiveTar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked (CVE-2020-28948) ArchiveTar: improper filename sanitization leads to file overwrites (CVE-2020-28949) ArchiveTar: directory traversal due to inadequate checking of symbolic links (CVE-2020-36193) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libzipto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/phpto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-pearto a version that resolves this vulnerability.Fixed in 1.10.13-1.module+el8.4.0+16578+ed65e99e - Upgrade
Upgrade
redhat/php-pecl-apcuto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-rrdto a version that resolves this vulnerability.Fixed in 2.0.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-xdebugto a version that resolves this vulnerability.Fixed in 2.9.5-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-zipto a version that resolves this vulnerability.Fixed in 1.18.2-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/apcu-panelto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/libzip-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/libzip-debugsourceto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/libzip-develto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/libzip-toolsto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/libzip-tools-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-bcmathto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-bcmath-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-clito a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-cli-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-commonto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-common-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-dbato a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-dba-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-dbgto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-dbg-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-debugsourceto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-develto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-embeddedto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-embedded-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-enchantto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-enchant-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-ffito a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-ffi-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-fpmto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-fpm-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-gdto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-gd-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-gmpto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-gmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-intlto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-intl-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-jsonto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-json-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-ldapto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-mbstringto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-mbstring-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-mysqlndto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-mysqlnd-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-odbcto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-odbc-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-opcacheto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-opcache-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-pdoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-pdo-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-pecl-apcu-debuginfoto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-apcu-debugsourceto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-apcu-develto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-rrd-debuginfoto a version that resolves this vulnerability.Fixed in 2.0.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-rrd-debugsourceto a version that resolves this vulnerability.Fixed in 2.0.1-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-xdebug-debuginfoto a version that resolves this vulnerability.Fixed in 2.9.5-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-xdebug-debugsourceto a version that resolves this vulnerability.Fixed in 2.9.5-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-zip-debuginfoto a version that resolves this vulnerability.Fixed in 1.18.2-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pecl-zip-debugsourceto a version that resolves this vulnerability.Fixed in 1.18.2-1.module+el8.3.0+6678+b09f589e - Upgrade
Upgrade
redhat/php-pgsqlto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-pgsql-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-processto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-process-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-snmpto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-soapto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-soap-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-xmlto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-xml-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-xmlrpcto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/php-xmlrpc-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227 - Upgrade
Upgrade
redhat/libzipto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/libzip-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/libzip-debugsourceto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/libzip-develto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/libzip-toolsto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/libzip-tools-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/phpto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-bcmathto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-bcmath-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-clito a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-cli-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-commonto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-common-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-dbato a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-dba-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-dbgto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-dbg-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-debugsourceto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-develto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-embeddedto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-embedded-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-enchantto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-enchant-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-ffito a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-ffi-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-fpmto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-fpm-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-gdto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-gd-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-gmpto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-gmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-intlto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-intl-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-jsonto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-json-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-ldapto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-mbstringto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-mbstring-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-mysqlndto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-mysqlnd-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-odbcto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-odbc-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-opcacheto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-opcache-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-pdoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-pdo-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-pecl-apcuto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-apcu-debuginfoto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-apcu-debugsourceto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-apcu-develto a version that resolves this vulnerability.Fixed in 5.1.18-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-rrdto a version that resolves this vulnerability.Fixed in 2.0.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-rrd-debuginfoto a version that resolves this vulnerability.Fixed in 2.0.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-rrd-debugsourceto a version that resolves this vulnerability.Fixed in 2.0.1-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-xdebugto a version that resolves this vulnerability.Fixed in 2.9.5-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-xdebug-debuginfoto a version that resolves this vulnerability.Fixed in 2.9.5-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-xdebug-debugsourceto a version that resolves this vulnerability.Fixed in 2.9.5-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-zipto a version that resolves this vulnerability.Fixed in 1.18.2-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-zip-debuginfoto a version that resolves this vulnerability.Fixed in 1.18.2-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pecl-zip-debugsourceto a version that resolves this vulnerability.Fixed in 1.18.2-1.module+el8.3.0+6678+b09f589e.aa - Upgrade
Upgrade
redhat/php-pgsqlto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-pgsql-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-processto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-process-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-snmpto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-soapto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-soap-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-xmlto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-xml-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-xmlrpcto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Upgrade
Upgrade
redhat/php-xmlrpc-debuginfoto a version that resolves this vulnerability.Fixed in 7.4.6-5.module+el8.4.0+15727+276bb227.aa - Operational
After installing the updated packages, restart the httpd daemon for the update to take effect.
Event History
Frequently Asked Questions
What security issues are addressed in RHSA-2022:6541?
RHSA-2022:6541 addresses vulnerabilities related to Archive_Tar including unserialization attacks and improper filename sanitization.
How do I patch the vulnerabilities identified in RHSA-2022:6541?
To patch the vulnerabilities in RHSA-2022:6541, update to the recommended versions of the affected PHP packages and libraries as specified in the advisory.
What versions of PHP are affected by RHSA-2022:6541?
The affected versions of PHP mentioned in RHSA-2022:6541 include 7.4.6-5.module+el8.4.0+15727+276bb227.
Is there a recommended remediation for RHSA-2022:6541?
The recommended remediation for RHSA-2022:6541 is to upgrade to the specific patched versions of the affected packages listed in the advisory.
What impact does RHSA-2022:6541 have on my systems?
RHSA-2022:6541 could lead to potential security risks such as remote code execution or data exposure if the vulnerabilities are exploited.