Amazon Linux 2 — php-pear — multiple vulnerabilities (5 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1602 Related CVEs: CVE-2020-36193 CVE-2021-32610 CVE-2020-28948 CVE-2020-28949 CVE-2018-1000888 Upstream summary: Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links. (CVE-2020-36193) Table […]