Format: 1.8
Date: Fri, 11 Jan 2019 13:23:21 -0500
Source: php-pear
Binary: php-pear
Architecture: all
Version: 1:1.10.5+submodules+notgz-1ubuntu1.18.04.1
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-026.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 php-pear   -
Changes:
 php-pear (1:1.10.5+submodules+notgz-1ubuntu1.18.04.1) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: unserialization vulnerability in Archive_Tar
     - debian/patches/CVE-2018-1000888.patch: don't allow filenames to start
       with phar:// in submodules/Archive_Tar/Archive/Tar.php.
     - CVE-2018-1000888
Checksums-Sha1:
 53f724b3e4d5971449d1afa53ff3290e95904951 284296 php-pear_1.10.5+submodules+notgz-1ubuntu1.18.04.1_all.deb
 dafee14818c3bb380d438da6c333ac9fd20955f2 5722 php-pear_1.10.5+submodules+notgz-1ubuntu1.18.04.1_amd64.buildinfo
Checksums-Sha256:
 ecc0e3c4ed11de0c3aaa5950c748c83797f4a943fb447b1cdac49ec35278f2a6 284296 php-pear_1.10.5+submodules+notgz-1ubuntu1.18.04.1_all.deb
 010e863f529285da1bd2fb9b11918650e425bd6eac012545c17fbd34a5186a33 5722 php-pear_1.10.5+submodules+notgz-1ubuntu1.18.04.1_amd64.buildinfo
Files:
 f953099fd9ec1c6e83720ec913d120dd 284296 php optional php-pear_1.10.5+submodules+notgz-1ubuntu1.18.04.1_all.deb
 7762ac3e3adfa6b70783f34d16d2300f 5722 php optional php-pear_1.10.5+submodules+notgz-1ubuntu1.18.04.1_amd64.buildinfo
Original-Maintainer: Debian PHP PEAR Maintainers <pkg-php-pear@lists.alioth.debian.org>