UbuntuUpdates.org

Package "php-pear"

Name: php-pear

Description:

PEAR Base System

Latest version: 1:1.10.9+submodules+notgz-1.1ubuntu1.1
Release: hirsute (21.04)
Level: updates
Repository: main
Homepage: https://pear.php.net/package/PEAR

Links


Download "php-pear"


Other versions of "php-pear" in Hirsute

Repository Area Version
base main 1:1.10.9+submodules+notgz-1.1ubuntu1
security main 1:1.10.9+submodules+notgz-1.1ubuntu1.1

Changelog

Version: 1:1.10.9+submodules+notgz-1.1ubuntu1.1 2021-07-29 18:06:27 UTC

  php-pear (1:1.10.9+submodules+notgz-1.1ubuntu1.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: incorrect symlink extraction
    - debian/patches/CVE-2021-32610.patch: properly fix symbolic link path
      traversal in submodules/Archive_Tar/Archive/Tar.php.
    - CVE-2021-32610

 -- Marc Deslauriers <email address hidden> Wed, 28 Jul 2021 10:47:32 -0400

CVE-2021-32610 In Archive_Tar before 1.4.14, symlinks can refer to targets outside of ...



About   -   Send Feedback to @ubuntu_updates