Vulnerability Bulletins |
Drupal core - Critical - Third Party Libraries - SA-CORE-2019-001 |
|
| Affected software | Drupal |
|
Project: Drupal coreDate: 2019-January-16Security risk: Critical 16∕25 AC:Complex/A:User/CI:All/II:All/E:Proof/TD:UncommonVulnerability: Third Party Libraries CVE IDs: CVE-2019-6338Description: Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-1000888 for details.Solution: If you are using Drupal 8.6.x, upgrade to Drupal 8.6.6.If you are using Drupal 8.5.x or earlier, upgrade More info: https://www.drupal.org/sa-core-2019-001 |
|