RHSA-2022:7340: CVEs fixed (Red Hat)
RHSA-2022:7340 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2020-36193 HIGH 7.5 EXPLOITED UPGRADE MITIGATE PEAR Archive_Tar Improper Link Resolution Vulnerability
- CVE-2020-28949 HIGH 7.8 EXPLOITED UPGRADE MITIGATE PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
Applies to
- RHEL 7 · fixed in php-pear-1.9.4-23.el7_9