Vulnerability Bulletins

DSA-4378 php-pear - security update

   
Affected software Debian
 
Fariskhi Vidyan discovered that the PEAR Archive_Tar package forhandling tar files in PHP is prone to a PHP object injectionvulnerability, potentially allowing a remote attacker to executearbitrary code.

More info:

https://www.debian.org/security/2019/dsa-4378