Format: 1.8 Date: Mon, 30 Nov 2020 09:55:16 -0500 Source: php-pear Binary: php-pear Architecture: all Version: 1:1.10.9+submodules+notgz-1ubuntu0.20.04.1 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: php-pear - Changes: php-pear (1:1.10.9+submodules+notgz-1ubuntu0.20.04.1) focal-security; urgency=medium . * SECURITY UPDATE: unserialization attack in Archive_Tar - debian/patches/CVE-2020-2894x.patch: catch additional malicious or crafted filenames in submodules/Archive_Tar/Archive/Tar.php. - CVE-2020-28948 - CVE-2020-28949 Checksums-Sha1: d8b9395ba26cb9f55594cc430b194f661a074e15 286376 php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1_all.deb 7cd88518410e5302b1d456a8bbdfdd3cde6b99d2 5660 php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1_amd64.buildinfo Checksums-Sha256: 1ee30baa1c02427e07b422adcf099193f8cab46278fac1734e6082a546b1e23f 286376 php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1_all.deb a5c6894e3ab20dd3d52511f4862b7043cabb47bc548b90f0e03fc60a9eec868d 5660 php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1_amd64.buildinfo Files: 33a28b8fecb361d396e74f85251c7b9c 286376 php optional php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1_all.deb 96969b70e4946bf29abb28022cd40ddb 5660 php optional php-pear_1.10.9+submodules+notgz-1ubuntu0.20.04.1_amd64.buildinfo Original-Maintainer: Debian PHP Maintainers