Format: 1.8 Date: Fri, 11 Jan 2019 13:24:22 -0500 Source: php-pear Binary: php-pear Architecture: all Version: 1:1.10.1+submodules+notgz-6ubuntu0.1 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: php-pear - ${phppear:summary} Changes: php-pear (1:1.10.1+submodules+notgz-6ubuntu0.1) xenial-security; urgency=medium . * SECURITY UPDATE: unserialization vulnerability in Archive_Tar - debian/patches/CVE-2018-1000888.patch: don't allow filenames to start with phar:// in submodules/Archive_Tar/Archive/Tar.php. - CVE-2018-1000888 Checksums-Sha1: a12d45e4039943028c35fff16de61c6a914f86b2 283958 php-pear_1.10.1+submodules+notgz-6ubuntu0.1_all.deb Checksums-Sha256: 912007544792d9ceec37201424c87aa511c13a730d91d52f2f4a61f82bf0c079 283958 php-pear_1.10.1+submodules+notgz-6ubuntu0.1_all.deb Files: a2561974ae5f547e059bc895bd02e270 283958 php optional php-pear_1.10.1+submodules+notgz-6ubuntu0.1_all.deb Original-Maintainer: Debian PHP PEAR Maintainers