CVE-2019-6338
Publication date 22 January 2019
Last updated 26 August 2025
Ubuntu priority
Description
In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-1000888 for details
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| drupal7 | 26.04 LTS resolute | Not in release |
| 25.10 questing | Not in release | |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Ignored end of standard support, was needed | |
| 14.04 LTS trusty |
Vulnerable
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
8.0 · High
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H