SA-CORE-2020-013 by luke.stewart, xjm, larowlan, mcdruid, drumm, mlhess

composer.lock

@@ -528,7 +528,7 @@
             "dist": {
                 "type": "path",
                 "url": "core",
-                "reference": "4659974dafc65cf2e9fbe00c8be0ccd0ef0aadba"
+                "reference": "a6f2bdf8cfc3d8ade8caa5473be482b20d1c6f83"
             },
             "require": {
                 "asm89/stack-cors": "^1.1",
@@ -553,7 +553,7 @@
                 "laminas/laminas-diactoros": "^2.1",
                 "laminas/laminas-feed": "^2.12",
                 "masterminds/html5": "^2.1",
-                "pear/archive_tar": "^1.4.9",
+                "pear/archive_tar": "^1.4.11",
                 "php": ">=7.3.0",
                 "psr/log": "^1.0",
                 "stack/builder": "^1.0",
@@ -1541,16 +1541,16 @@
         },
         {
             "name": "pear/archive_tar",
-            "version": "1.4.10",
+            "version": "1.4.11",
             "source": {
                 "type": "git",
                 "url": "https://github.com/pear/Archive_Tar.git",
-                "reference": "bbb4f10f71a1da2715ec6d9a683f4f23c507a49b"
+                "reference": "17d355cb7d3c4ff08e5729f29cd7660145208d9d"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/pear/Archive_Tar/zipball/bbb4f10f71a1da2715ec6d9a683f4f23c507a49b",
-                "reference": "bbb4f10f71a1da2715ec6d9a683f4f23c507a49b",
+                "url": "https://api.github.com/repos/pear/Archive_Tar/zipball/17d355cb7d3c4ff08e5729f29cd7660145208d9d",
+                "reference": "17d355cb7d3c4ff08e5729f29cd7660145208d9d",
                 "shasum": ""
             },
             "require": {
@@ -1607,7 +1607,7 @@
                 "issues": "http://pear.php.net/bugs/search.php?cmd=display&package_name[]=Archive_Tar",
                 "source": "https://github.com/pear/Archive_Tar"
             },
-            "time": "2020-09-15T14:13:23+00:00"
+            "time": "2020-11-19T22:10:24+00:00"
         },
         {
             "name": "pear/console_getopt",

composer/Metapackage/CoreRecommended/composer.json

@@ -23,7 +23,7 @@
         "laminas/laminas-stdlib": "3.3.0",
         "laminas/laminas-zendframework-bridge": "1.1.1",
         "masterminds/html5": "2.7.4",
-        "pear/archive_tar": "1.4.10",
+        "pear/archive_tar": "1.4.11",
         "pear/console_getopt": "v1.4.3",
         "pear/pear-core-minimal": "v1.10.10",
         "pear/pear_exception": "v1.0.1",

core/composer.json

@@ -44,7 +44,7 @@
         "laminas/laminas-diactoros": "^2.1",
         "composer/semver": "^3.0",
         "asm89/stack-cors": "^1.1",
-        "pear/archive_tar": "^1.4.9",
+        "pear/archive_tar": "^1.4.11",
         "psr/log": "^1.0"
     },
     "conflict": {