{"id":"CVE-2021-32610","aliases":["ALPINE-CVE-2021-32610","ALSA-2022:7628","DEBIAN-CVE-2021-32610","DLA-2721-1","DRUPAL-CORE-2021-004","EUVD-2021-1814","GHSA-p8q8-jfcv-g2h2","MGASA-2021-0393","RHSA-2022:7628","RLSA-2022:7628","SUSE-SU-2022:3198-1","SUSE-SU-2022:3198-2","UBUNTU-CVE-2021-32610","USN-5027-1","USN-5027-2","openSUSE-SU-2024:11168-1","openSUSE-SU-2024:11170-1"],"status":"published","title":"Directory Traversal in Archive_Tar","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.73377,"percentile":0.9947,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2021-07-21T15:59:27Z","modified":"2026-11-03T06:32:33Z","fixes":[{"ecosystem":"Packagist","package":"pear/archive_tar","fixed_in":["1.4.14"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.14","package":"drupal7","fixed_in":["7.82-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"drupal7","fixed_in":["7.82-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"drupal7","fixed_in":["7.82-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"drupal7","fixed_in":["7.82-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"drupal7","fixed_in":["7.82-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"drupal7","fixed_in":["7.82-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"drupal7","fixed_in":["7.82-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"php-pear","fixed_in":["1:1.10.13+submodules+notgz-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"php-pear","fixed_in":["1:1.10.13+submodules+notgz-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"php-pear","fixed_in":["1:1.10.13+submodules+notgz-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"drupal7","fixed_in":["7.52-2+deb9u16"],"sources":["osv"]},{"ecosystem":"Packagist","package":"drupal/core","fixed_in":["8.9.17","9.1.11","9.2.2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"php-pear","fixed_in":["1.10.12-5.2.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP4","package":"php8-pear","fixed_in":["1.10.21-150400.9.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"php8-pear","fixed_in":["1.10.21-150400.9.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php-pear","fixed_in":["1:1.10.1+submodules+notgz-6ubuntu0.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"php-pear","fixed_in":["1:1.10.5+submodules+notgz-1ubuntu1.18.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"php-pear","fixed_in":["1:1.10.9+submodules+notgz-1ubuntu0.20.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"php-pear","fixed_in":["1:1.10.12+submodules+notgz+20210212-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"pear/archive_tar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.14"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.82-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.82-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.82-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.82-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.82-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.82-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.82-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.13-1.module_el8.6.0+3268+b150a051"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.18-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-1.module_el8.6.0+2750+78feabcb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-1.module_el8.6.0+3239+bedf0508"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.30-1.module_el8.7.0+3286+227f3cf0"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.13+submodules+notgz-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.13+submodules+notgz-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.13+submodules+notgz-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.52-2+deb9u16"}]}],"versions":["7.52-2","7.52-2+deb9u1","7.52-2+deb9u10","7.52-2+deb9u11","7.52-2+deb9u12","7.52-2+deb9u13","7.52-2+deb9u14","7.52-2+deb9u15","7.52-2+deb9u2","7.52-2+deb9u3","7.52-2+deb9u4","7.52-2+deb9u5","7.52-2+deb9u6","7.52-2+deb9u7","7.52-2+deb9u8","7.52-2+deb9u9"]},{"source":"osv","ecosystem":"Packagist","package":"drupal/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.9.17"}]},{"type":"ECOSYSTEM","events":[{"introduced":"9.1.0"},{"fixed":"9.1.11"}]},{"type":"ECOSYSTEM","events":[{"introduced":"9.2.0"},{"fixed":"9.2.2"}]}],"versions":["8.0.0","8.0.1","8.0.2","8.0.3","8.0.4","8.0.5","8.0.6","8.1.0","8.1.0-beta1","8.1.0-beta2","8.1.0-rc1","8.1.1","8.1.10","8.1.2","8.1.3","8.1.4","8.1.5","8.1.6","8.1.7","8.1.8","8.1.9","8.2.0","8.2.0-beta1","8.2.0-beta2","8.2.0-beta3","8.2.0-rc1","8.2.0-rc2","8.2.1","8.2.2","8.2.3","8.2.4","8.2.5","8.2.6","8.2.7","8.2.8","8.3.0","8.3.0-alpha1","8.3.0-beta1","8.3.0-rc1","8.3.0-rc2","8.3.1","8.3.2","8.3.3","8.3.4","8.3.5","8.3.6","8.3.7","8.3.8","8.3.9","8.4.0","8.4.0-alpha1","8.4.0-beta1","8.4.0-rc1","8.4.0-rc2","8.4.1","8.4.2","8.4.3","8.4.4","8.4.5","8.4.6","8.4.7","8.4.8","8.5.0","8.5.0-alpha1","8.5.0-beta1","8.5.0-rc1","8.5.1","8.5.10","8.5.11","8.5.12","8.5.13","8.5.14","8.5.15","8.5.2","8.5.3","8.5.4","8.5.5","8.5.6","8.5.7","8.5.8","8.5.9","8.6.0","8.6.0-alpha1","8.6.0-beta1","8.6.0-beta2","8.6.0-rc1","8.6.1","8.6.10","8.6.11","8.6.12","8.6.13","8.6.14","8.6.15","8.6.16","8.6.17","8.6.18","8.6.2","8.6.3","8.6.4","8.6.5","8.6.6","8.6.7","8.6.8","8.6.9","8.7.0","8.7.0-alpha1","8.7.0-alpha2","8.7.0-beta1","8.7.0-beta2","8.7.0-rc1","8.7.1","8.7.10","8.7.11","8.7.12","8.7.13","8.7.14","8.7.2","8.7.3","8.7.4","8.7.5","8.7.6","8.7.7","8.7.8","8.7.9","8.8.0","8.8.0-alpha1","8.8.0-beta1","8.8.0-rc1","8.8.1","8.8.10","8.8.11","8.8.12","8.8.2","8.8.3","8.8.4","8.8.5","8.8.6","8.8.7","8.8.8","8.8.9","8.9.0","8.9.0-beta1","8.9.0-beta2","8.9.0-beta3","8.9.0-rc1","8.9.1","8.9.10","8.9.11","8.9.12","8.9.13","8.9.14","8.9.15","8.9.16","8.9.2","8.9.3","8.9.4","8.9.5","8.9.6","8.9.7","8.9.8","8.9.9","9.1.0","9.1.1","9.1.10","9.1.2","9.1.3","9.1.4","9.1.5","9.1.6","9.1.7","9.1.8","9.1.9","9.2.0","9.2.1"]},{"source":"osv","ecosystem":"Packagist","package":"pear/archive_tar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.14"}]}],"versions":["1.3.11","1.3.12","1.3.13","1.3.14","1.3.15","1.3.16","1.4.0","1.4.1","1.4.10","1.4.11","1.4.12","1.4.13","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7","1.4.8","1.4.9"]},{"source":"osv","ecosystem":"Mageia:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.12-5.2.mga8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apcu-panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libzip-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-bcmath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-dbg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-enchant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-fpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-gmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-intl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-json-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mbstring-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-mysqlnd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-opcache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pdo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.13-1.module+el8.7.0+15127+a450a8db"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-apcu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-rrd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-xdebug-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pecl-zip-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.3.0+6678+b09f589e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-pgsql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-process-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-soap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xml-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"php-xmlrpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+15886+8e29b882"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.6.0+789+2130c178"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libzip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-1.module+el8.4.0+415+e936cba3"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.30-1.module+el8.7.0+1067+0a7071cc"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.13-1.module+el8.7.0+1067+0a7071cc"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.13-1.module+el8.6.0+1006+0d5a469f"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.6.0+789+2130c178"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-apcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.18-1.module+el8.4.0+415+e936cba3"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-rrd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.module+el8.4.0+414+2e7afcdd"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-xdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.5-1.module+el8.4.0+415+e936cba3"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.6.0+789+2130c178"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"php-pecl-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.2-1.module+el8.4.0+415+e936cba3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 15 SP4","package":"php8-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.21-150400.9.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"php8-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.21-150400.9.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.23-1","7.24-1","7.24-2","7.26-1","7.26-1ubuntu0.1","7.26-1ubuntu0.1+esm1","7.26-1ubuntu0.1+esm2","7.26-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.1+submodules+notgz-6ubuntu0.3+esm1"}]}],"versions":["1:1.10.1+submodules+notgz-4","1:1.10.1+submodules+notgz-6","1:1.10.1+submodules+notgz-6ubuntu0.1","1:1.10.1+submodules+notgz-6ubuntu0.2","1:1.10.1+submodules+notgz-6ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.38-1","7.41-1","7.44-1ubuntu1~16.04.0","7.44-1ubuntu1~16.04.0+esm1","7.44-1ubuntu1~16.04.0+esm2","7.44-1ubuntu1~16.04.0+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.5+submodules+notgz-1ubuntu1.18.04.4"}]}],"versions":["1:1.10.5+submodules+notgz-1","1:1.10.5+submodules+notgz-1ubuntu1","1:1.10.5+submodules+notgz-1ubuntu1.18.04.1","1:1.10.5+submodules+notgz-1ubuntu1.18.04.2","1:1.10.5+submodules+notgz-1ubuntu1.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9+submodules+notgz-1ubuntu0.20.04.3"}]}],"versions":["1:1.10.9+submodules+notgz-1","1:1.10.9+submodules+notgz-1ubuntu0.20.04.1","1:1.10.9+submodules+notgz-1ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.12+submodules+notgz+20210212-1ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.5+submodules+notgz-1ubuntu1.18.04.4"}]}],"versions":["1:1.10.5+submodules+notgz-1","1:1.10.5+submodules+notgz-1ubuntu1","1:1.10.5+submodules+notgz-1ubuntu1.18.04.1","1:1.10.5+submodules+notgz-1ubuntu1.18.04.2","1:1.10.5+submodules+notgz-1ubuntu1.18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.9+submodules+notgz-1ubuntu0.20.04.3"}]}],"versions":["1:1.10.9+submodules+notgz-1","1:1.10.9+submodules+notgz-1ubuntu0.20.04.1","1:1.10.9+submodules+notgz-1ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php-pear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10.1+submodules+notgz-6ubuntu0.3+esm1"}]}],"versions":["1:1.10.1+submodules+notgz-4","1:1.10.1+submodules+notgz-6","1:1.10.1+submodules+notgz-6ubuntu0.1","1:1.10.1+submodules+notgz-6ubuntu0.2","1:1.10.1+submodules+notgz-6ubuntu0.3"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"php","product":"archive_tar"}],"references":[{"url":"https://www.drupal.org/sa-core-2021-004","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00023.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://github.com/pear/Archive_Tar/releases/tag/1.4.14","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","web"]},{"url":"https://github.com/pear/Archive_Tar/commit/b5832439b1f37331fb4f87e67fe4f","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G5LTY6COQYNMMHQJ3QIOJHEWCKD4XDFH/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAODVMHGL5MHQWQAQTXQ7G7OE3VQZ7LS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://github.com/pear/Archive_Tar/commit/7789ebb2f34f9e4adb3a4152ad0d1548930a9755","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32610","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CAODVMHGL5MHQWQAQTXQ7G7OE3VQZ7LS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G5LTY6COQYNMMHQJ3QIOJHEWCKD4XDFH/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/"},{"url":"https://github.com/advisories/GHSA-p8q8-jfcv-g2h2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-32610","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7628","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21707","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21708","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32610","tags":["report"]},{"url":"https://bugzilla.redhat.com/1988558","tags":["report"]},{"url":"https://bugzilla.redhat.com/2026045","tags":["report"]},{"url":"https://bugzilla.redhat.com/2055879","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7628.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-32610","tags":["advisory"]},{"url":"https://github.com/pear/Archive_Tar","tags":["package"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CAODVMHGL5MHQWQAQTXQ7G7OE3VQZ7LS","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G5LTY6COQYNMMHQJ3QIOJHEWCKD4XDFH","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2021-0393.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29299","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055879","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7628.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21707","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21707","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21708","tags":["advisory"]},{"url":"https://www.php.net/ChangeLog-7.php#PHP_7_4","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32610","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7628","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223198-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32610","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223198-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-32610","tags":["report"]},{"url":"https://pear.php.net/package/Archive_Tar/download/1.4.14/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5027-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5027-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-32610","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-07-27T05:21:47Z","modified":"2024-08-03T23:25:30.46Z","updated_at":"2026-11-02T14:33:06.658806Z"}],"euvd":[{"id":"EUVD-2021-1814","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-07-27T05:21:47Z","modified":"2024-08-03T23:25:30Z","updated_at":"2026-11-03T03:24:36.41075Z"}],"ghsa":[{"id":"GHSA-p8q8-jfcv-g2h2","title":"Directory Traversal in Archive_Tar","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-08-09T20:40:06Z","modified":"2023-02-01T05:06:02Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:36:36.66596Z"}],"nvd":[{"id":"CVE-2021-32610","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-07-30T14:15:16.94Z","modified":"2026-06-17T03:53:16.013Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:06:56.185362Z"}],"osv":[{"id":"ALPINE-CVE-2021-32610","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-07-30T14:15:16.94Z","modified":"2026-11-03T06:32:33.50990841Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2021-32610","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-07-30T14:15:16.94Z","modified":"2026-10-20T10:54:41.697069292Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:19.793849Z"},{"id":"DEBIAN-CVE-2021-32610","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-07-30T14:15:16.94Z","modified":"2026-10-23T18:03:49.342766705Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"GHSA-p8q8-jfcv-g2h2","title":"Directory Traversal in Archive_Tar","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-08-09T20:40:06Z","modified":"2025-12-10T23:40:57.950081Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T15:46:52.891208Z"},{"id":"RHSA-2022:7628","title":"Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:39:45Z","modified":"2026-08-07T10:07:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7628","title":"Moderate: php:7.4 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.4.30), php-pear (1.10.13). (BZ#2055422)\n\nSecurity Fix(es):\n\n* php: Special character breaks path in xml parsing (CVE-2021-21707)\n\n* php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)\n\n* php-pear: Directory traversal vulnerability (CVE-2021-32610)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:25:00Z","modified":"2026-02-04T07:40:27.282713Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-32610","description":"In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.","status":"published","published":"2021-07-27T00:00:00Z","modified":"2026-10-08T12:50:11.528455589Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"ALSA-2022:7628","title":"Moderate: php:7.4 security, bug fix, and enhancement update","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nThe following packages have been upgraded to a later upstream version: php (7.4.30), php-pear (1.10.13). (BZ#2055422)\n\nSecurity Fix(es):\n\n* php: Special character breaks path in xml parsing (CVE-2021-21707)\n* php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708)\n* php-pear: Directory traversal vulnerability (CVE-2021-32610)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:37.944554106Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-2721-1","title":"drupal7 - security update","status":"published","published":"2021-07-26T00:00:00Z","modified":"2026-03-09T01:19:32.382979Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DRUPAL-CORE-2021-004","description":"The Drupal project uses the pear Archive\\_Tar library, which has released a security update that impacts Drupal.\n\nThe vulnerability is mitigated by the fact that Drupal core's use of the Archive\\_Tar library is not vulnerable, as it does not permit symlinks.\n\nExploitation may be possible if contrib or custom code uses the library to extract tar archives (for example .tar, .tar.gz, .bz2, or .tlz) which come from a potentially untrusted source.\n\nThis advisory is not covered by [Drupal Steward](/steward).","status":"published","published":"2021-07-21T15:59:27Z","modified":"2026-09-19T17:45:13Z","updated_at":"2026-11-02T15:46:13.900249Z"},{"id":"MGASA-2021-0393","title":"Updated php-pear packages fix security vulnerability","description":"Updated php-pear packages fix security vulnerability:\n\nIn Archive_Tar before 1.4.14, symlinks can refer to targets outside\nof the extracted archive (CVE-2021-32610).\n","status":"published","published":"2021-08-06T09:33:48Z","modified":"2026-04-16T04:43:22.112739265Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:11168-1","title":"php7-pear-1.10.21-1.2 on GA media","description":"These are all security issues fixed in the php7-pear-1.10.21-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:55:10.878524Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11170-1","title":"php8-pear-1.10.21-1.2 on GA media","description":"These are all security issues fixed in the php8-pear-1.10.21-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:21:24.020905Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2022:3198-1","title":"Security update for php8-pear","description":"This update for php8-pear fixes the following issues:\n\n- Add php8-pear to SLE15-SP4 (jsc#SLE-24728)\n- Update to 1.10.21\n  - PEAR 1.10.13\n    * unsupported protocol - use --force to continue\n    * Add $this operator to _determineIfPowerpc calls\n- Update to 1.10.20\n  - Archive_Tar 1.4.14\n    * Properly fix symbolic link path traversal (CVE-2021-32610)\n  - Archive_Tar 1.4.13\n    * Relative symlinks failing (out-of path file extraction)\n  - Archive_Tar 1.4.12\n  - Archive_Tar 1.4.11\n  - Archive_Tar 1.4.10\n    * Fix block padding when the file buffer length is a multiple\n      of 512 and smaller than Archive_Tar buffer length\n    * Don't try to copy username/groupname in chroot jail\n\n- provides and obsoletes php7-pear-Archive_Tar, former location\n  of PEAR/Archive/Tar.php\n\n- Update to version 1.10.19\n  - PEAR 1.10.12\n    * adjust dependencies based on new releases\n  - XML_Util 1.4.5\n    * fix Trying to access array offset on value of type int\n\n- Update to version 1.10.18\n- Remove pear-cacheid-array-check.patch (upstreamed)\n- Contents of .filemap are now sorted internally\n\n- Sort contents of .filemap to make build reproducible\n\n- Recommend php7-openssl to allow https sources to be used\n- Modify metadata_dir for system configuration only\n- Add /var/lib/pear directory where xml files are stored\n- Cleanup %files section\n\n- Only use the GPG keys of Chuck Burgess. Extracted from the \n  Release Manager public keys.\n- Add release versions of PEAR modules\n\n- Install metadata files (registry, filemap, channels, ...) in\n  /var/lib/pear/ instead of /usr/share/php7/PEAR/\n\n- Update to version 1.10.17\n","status":"published","published":"2022-09-08T08:36:07Z","modified":"2026-02-04T04:20:29.57911Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3198-2","title":"Security update for php8-pear","description":"This update for php8-pear fixes the following issues:\n\n- Add php8-pear to SLE15-SP4 (jsc#SLE-24728)\n- Update to 1.10.21\n  - PEAR 1.10.13\n    * unsupported protocol - use --force to continue\n    * Add $this operator to _determineIfPowerpc calls\n- Update to 1.10.20\n  - Archive_Tar 1.4.14\n    * Properly fix symbolic link path traversal (CVE-2021-32610)\n  - Archive_Tar 1.4.13\n    * Relative symlinks failing (out-of path file extraction)\n  - Archive_Tar 1.4.12\n  - Archive_Tar 1.4.11\n  - Archive_Tar 1.4.10\n    * Fix block padding when the file buffer length is a multiple\n      of 512 and smaller than Archive_Tar buffer length\n    * Don't try to copy username/groupname in chroot jail\n\n- provides and obsoletes php7-pear-Archive_Tar, former location\n  of PEAR/Archive/Tar.php\n\n- Update to version 1.10.19\n  - PEAR 1.10.12\n    * adjust dependencies based on new releases\n  - XML_Util 1.4.5\n    * fix Trying to access array offset on value of type int\n\n- Update to version 1.10.18\n- Remove pear-cacheid-array-check.patch (upstreamed)\n- Contents of .filemap are now sorted internally\n\n- Sort contents of .filemap to make build reproducible\n\n- Recommend php7-openssl to allow https sources to be used\n- Modify metadata_dir for system configuration only\n- Add /var/lib/pear directory where xml files are stored\n- Cleanup %files section\n\n- Only use the GPG keys of Chuck Burgess. Extracted from the \n  Release Manager public keys.\n- Add release versions of PEAR modules\n\n- Install metadata files (registry, filemap, channels, ...) in\n  /var/lib/pear/ instead of /usr/share/php7/PEAR/\n\n- Update to version 1.10.17\n","status":"published","published":"2023-02-07T09:12:06Z","modified":"2026-02-04T02:41:50.738803Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5027-1","title":"php-pear vulnerability","description":"It was discovered that PEAR incorrectly handled symbolic links in archives.\nA remote attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2021-07-29T16:35:13Z","modified":"2026-04-27T15:55:17.608376Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5027-2","title":"php-pear vulnerability","description":"USN-5027-1 fixed a vulnerability in PEAR. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that PEAR incorrectly handled symbolic links in archives.\n A remote attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2021-08-04T13:09:44Z","modified":"2026-06-25T13:30:42.053193524Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}