| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/core | ≥ 8.0.0, < 8.5.9≥ 8.6.0, < 8.6.6 | 8.5.98.6.6 |
| drupal/drupal | ≥ 7.0.0, < 7.62.0≥ 8.0.0, < 8.5.9≥ 8.6.0, < 8.6.6 | 7.62.08.5.98.6.6 |
| drupal | ≥ 7.0, < 7.62≥ 8.5.0, < 8.5.9≥ 8.6.0, < 8.6.6 | 7.628.5.98.6.6 |
In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-1000888 for details
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free