CVE-2021-32610
php-pear: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of theextracted archive, a different vulnerabilit...
CVE-2021-32610 is fixed in 37 products on 1 platform, first by php-pear 1:1.10.5+submodules+notgz-1ubuntu1.18.04.4, released July 26, 2021. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
9.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.7338
99th percentile
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of theextracted archive, a different vulnerability than CVE-2020-36193.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| apcu-panel · RHEL 8 | 0:5.1.18-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| apcu-panel · almalinux 8 | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2022:7628 | Nov 8, 2022 |
| apcu-panel · ol 8 | 0:5.1.18-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| libzip · RHEL 8 | 0:1.6.1-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| libzip · almalinux 8 | 1.6.1-1.module_el8.6.0+2750+78feabcb | ALSA-2022:7628 | Nov 8, 2022 |
| libzip · ol 8 | 0:1.6.1-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| libzip · rocky 8 | 0:1.6.1-1.module+el8.6.0+789+2130c178 | RLSA-2022:7628 | Nov 8, 2022 |
| libzip-devel · RHEL 8 | 0:1.6.1-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| libzip-devel · almalinux 8 | 1.6.1-1.module_el8.6.0+2750+78feabcb | ALSA-2022:7628 | Nov 8, 2022 |
| libzip-devel · ol 8 | 0:1.6.1-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| libzip-tools · RHEL 8 | 0:1.6.1-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| libzip-tools · almalinux 8 | 1.6.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2022:7628 | Nov 8, 2022 |
| libzip-tools · ol 8 | 0:1.6.1-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| php · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php · rocky 8 | 0:7.4.30-1.module+el8.7.0+1067+0a7071cc | RLSA-2022:7628 | Nov 8, 2022 |
| php-bcmath · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-bcmath · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-bcmath · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-cli · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-cli · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-cli · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-common · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-common · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-common · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-dba · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-dba · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-dba · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-dbg · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-dbg · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-dbg · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-devel · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-devel · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-devel · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-embedded · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-embedded · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-embedded · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-enchant · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-enchant · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-enchant · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-ffi · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-ffi · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-ffi · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-fpm · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-fpm · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-fpm · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-gd · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-gd · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-gd · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-gmp · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-gmp · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-gmp · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-intl · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-intl · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-intl · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-json · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-json · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-json · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-ldap · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-ldap · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-ldap · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-mbstring · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-mbstring · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-mbstring · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-mysqlnd · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-mysqlnd · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-mysqlnd · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-odbc · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-odbc · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-odbc · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-opcache · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-opcache · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-opcache · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pdo · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-pdo · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-pdo · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pear · RHEL 8 | 1:1.10.13-1.module+el8.7.0+15127+a450a8db | RHSA-2022:7628 | Nov 8, 2022 |
| php-pear · Ubuntu 18.04.6 LTS (bionic) | 1:1.10.5+submodules+notgz-1ubuntu1.18.04.4 | php-pear 1:1.10.5+submodules+notgz-1ubuntu1.18.04.4 | Jul 26, 2021 |
| php-pear · Ubuntu 20.04 LTS (focal) | 1:1.10.9+submodules+notgz-1ubuntu0.20.04.3 | php-pear 1:1.10.9+submodules+notgz-1ubuntu0.20.04.3 | Jul 26, 2021 |
| php-pear · Ubuntu 22.04.1 LTS (jammy) | 1:1.10.12+submodules+notgz+20210212-1ubuntu1 | php-pear 1:1.10.12+submodules+notgz+20210212-1ubuntu1 | Jul 26, 2021 |
| php-pear · Ubuntu 24.10 (oracular) | 1:1.10.12+submodules+notgz+20210212-1ubuntu1 | php-pear 1:1.10.12+submodules+notgz+20210212-1ubuntu1 | Jan 16, 2026 |
| php-pear · Ubuntu 25.04 (plucky) | 1:1.10.12+submodules+notgz+20210212-1ubuntu1 | php-pear 1:1.10.12+submodules+notgz+20210212-1ubuntu1 | Jan 16, 2026 |
| php-pear · almalinux 8 | 1:1.10.13-1.module_el8.6.0+3268+b150a051 | ALSA-2022:7628 | Nov 8, 2022 |
| php-pear · ol 8 | 1:1.10.13-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pear · rocky 8 | 1:1.10.13-1.module+el8.7.0+1067+0a7071cc | RLSA-2022:7628 | Nov 8, 2022 |
| php-pecl-apcu · RHEL 8 | 0:5.1.18-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| php-pecl-apcu · almalinux 8 | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2022:7628 | Nov 8, 2022 |
| php-pecl-apcu · ol 8 | 0:5.1.18-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pecl-apcu · rocky 8 | 0:5.1.18-1.module+el8.6.0+789+2130c178 | RLSA-2022:7628 | Nov 8, 2022 |
| php-pecl-apcu-devel · RHEL 8 | 0:5.1.18-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| php-pecl-apcu-devel · almalinux 8 | 5.1.18-1.module_el8.6.0+3239+bedf0508 | ALSA-2022:7628 | Nov 8, 2022 |
| php-pecl-apcu-devel · ol 8 | 0:5.1.18-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pecl-rrd · RHEL 8 | 0:2.0.1-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| php-pecl-rrd · almalinux 8 | 2.0.1-1.module_el8.6.0+2750+78feabcb | ALSA-2022:7628 | Nov 8, 2022 |
| php-pecl-rrd · ol 8 | 0:2.0.1-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pecl-rrd · rocky 8 | 0:2.0.1-1.module+el8.4.0+414+2e7afcdd | RLSA-2022:7628 | Nov 8, 2022 |
| php-pecl-xdebug · RHEL 8 | 0:2.9.5-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| php-pecl-xdebug · almalinux 8 | 2.9.5-1.module_el8.6.0+3239+bedf0508 | ALSA-2022:7628 | Nov 8, 2022 |
| php-pecl-xdebug · ol 8 | 0:2.9.5-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pecl-xdebug · rocky 8 | 0:2.9.5-1.module+el8.4.0+415+e936cba3 | RLSA-2022:7628 | Nov 8, 2022 |
| php-pecl-zip · RHEL 8 | 0:1.18.2-1.module+el8.3.0+6678+b09f589e | RHSA-2022:7628 | Nov 8, 2022 |
| php-pecl-zip · almalinux 8 | 1.18.2-1.module_el8.6.0+2750+78feabcb | ALSA-2022:7628 | Nov 8, 2022 |
| php-pecl-zip · ol 8 | 0:1.18.2-1.module+el8.3.0+7685+72d70b58 | ELSA-2022-7628 | Nov 15, 2022 |
| php-pecl-zip · rocky 8 | 0:1.18.2-1.module+el8.6.0+789+2130c178 | RLSA-2022:7628 | Nov 8, 2022 |
| php-pgsql · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-pgsql · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-pgsql · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-process · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-process · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-process · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-snmp · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-snmp · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-snmp · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-soap · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-soap · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-soap · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-xml · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-xml · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-xml · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
| php-xmlrpc · RHEL 8 | 0:7.4.30-1.module+el8.7.0+15886+8e29b882 | RHSA-2022:7628 | Nov 8, 2022 |
| php-xmlrpc · almalinux 8 | 7.4.30-1.module_el8.7.0+3286+227f3cf0 | ALSA-2022:7628 | Nov 8, 2022 |
| php-xmlrpc · ol 8 | 0:7.4.30-1.module+el8.7.0+20800+8e29b882 | ELSA-2022-7628 | Nov 15, 2022 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.