Debian/php-pear: high 7.1

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

Action: Upgrade php-pear to 1:1.10.13+submodules+notgz-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2021-32610
• https://security-tracker.debian.org/tracker/CVE-2021-32610

published 2021-07-30T14:15:16.940Z · modified 2026-10-23T18:03:49.342766705Z · JSON