[SECURITY] Fedora 35 Update: php-pear-CAS-1.6.0-1.fc35

This package is a PEAR library for using a Central Authentication Service. Autoloader: %pearphpdir/CAS/Autoload.php...

The vulnerability lies in the implementation of the `mt_rand()` and `time()` functions in the pearweb package’s PHP classes from the PEAR library. This allows an attacker to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability in the implementation of the mtrand and time functions in the pearweb package’s PHP class library in the PEAR library is related to the use of an insufficiently secure MD5 encryption algorithm. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

The vulnerability of the _maliciousfilename function in the Archive_Tar class of the PHP classes in the PEAR library allows a malicious actor to execute arbitrary PHP code.

The vulnerability of the maliciousfilename function in the ArchiveTar class of the PHP classes in the PEAR library is related to the restoration of a unreliable data structure in memory. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code using a specially crafted .tar...

The vulnerability of the Archive_Tar class in the PHP classes library of PEAR allows a attacker to overwrite protected files.

The vulnerability of the ArchiveTar class in the PHP classes library of PEAR is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability could allow an attacker to overwrite protected files by using a specially crafted...

USN-4654-1 php-pear vulnerabilities

It was discovered that PEAR incorrectly sanitized filenames. A remote attacker could possibly use this issue to execute arbitrary code...

Fedora Update for php-pear-CAS FEDORA-2018-6d62140b89

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: php-pear-CAS-1.3.6-1.fc27

This package is a PEAR library for using a Central Authentication Service. Autoloader '%pearphpdir/CAS/Autoload.php';...

[SECURITY] Fedora 25 Update: php-pear-CAS-1.3.5-1.fc25

This package is a PEAR library for using a Central Authentication Service. Autoloader '%pearphpdir/CAS/Autoload.php';...

[SECURITY] Fedora 26 Update: php-pear-CAS-1.3.5-1.fc26

This package is a PEAR library for using a Central Authentication Service. Autoloader '%pearphpdir/CAS/Autoload.php';...

UBUNTU-CVE-2014-5459

The PEARREST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a 1 rest.cachefile or 2 rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions...

[SECURITY] Fedora 18 Update: php-pear-CAS-1.3.2-1.fc18

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 17 Update: php-pear-CAS-1.3.2-1.fc17

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 16 Update: php-pear-CAS-1.3.2-1.fc16

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 17 Update: php-pear-CAS-1.3.0-2.fc17

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 12 Update: php-pear-CAS-1.1.3-1.fc12

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 14 Update: php-pear-CAS-1.1.3-1.fc14

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 14 Update: php-pear-CAS-1.1.2-1.fc14

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 12 Update: php-pear-CAS-1.1.2-1.fc12

This package is a PEAR library for using a Central Authentication Service...

[SECURITY] Fedora 13 Update: php-pear-CAS-1.1.2-1.fc13

This package is a PEAR library for using a Central Authentication Service...

Ubuntu 4.10 / 5.04 : php4, php4-universe fixed packages (USN-147-2)

USN-147-1 1 fixed a remote code execution vulnerability in the XMLRPC module of the PEAR library. Unfortunately the packages announced in USN-147-1 were faulty and shipped broken xmlrpc modules. The updated packages ship correct modules. We apologize for the inconvenience. 1...