USN-5027-2: PEAR vulnerability
04 August 2021
PEAR could be made to overwrite files as the administrator.
- php-pear - PHP Extension and Application Repository
USN-5027-1 fixed a vulnerability in PEAR. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that PEAR incorrectly handled symbolic links in archives.
A remote attacker could possibly use this issue to execute arbitrary code.
- USN-5027-1: php-pear