Debian/php-pear: high 7.8

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Action: Upgrade php-pear to 1:1.10.9+submodules+notgz-1.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2020-28948
• https://security-tracker.debian.org/tracker/CVE-2020-28948

published 2020-11-19T19:15:11.877Z · modified 2026-10-26T12:02:24.263793755Z · JSON