CVE-2019-6338

Name of the Vulnerable Software and Affected Versions Drupal Core versions 7.x prior to 7.62 Drupal Core versions 8.5.x prior to 8.5.9 Drupal Core versions 8.6.x prior to 8.6.6

Description The issue is related to the PEAR Archive Tar library used by Drupal Core, which has a security update that affects some Drupal configurations. The vulnerability is associated with the restoration of an unreliable data structure in memory, allowing a remote attacker to potentially execute arbitrary code.

Recommendations For Drupal Core version 7.x, update to version 7.62 or later. For Drupal Core version 8.5.x, update to version 8.5.9 or later. For Drupal Core version 8.6.x, update to version 8.6.6 or later.