tocsin

Packagist/drupal/core CVE-2019-6338: unknown, EPSS 2.12%

Drupal core uses the third-party PEAR Archive\_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to [CVE-2018-1000888](https://nvd.nist.gov/vuln/

Action: Upgrade drupal/core to 8.5.9 or later.

composer require drupal/core:8.5.9
composer require drupal/core:8.6.6

Affected

introducedfixedlast affected
8.0.08.5.9-
8.6.08.6.6-

Fixed versions

8.5.98.6.6

Sources

CVE-2019-6338 · published · modified · JSON