CVE:CVE-2020-28948
CNNVD:CNNVD-202011-1691
Pear Archive_Tar是Pear（PEAR）团队的一个基于Php的可以对tar包进行创建、提取等操作的软件。
Archive_Tar 1.4.10版本及之前版本存在安全漏洞，该漏洞允许反序列化攻击，因为phar:被阻塞而phar:没有被阻塞。
solution:Upgrade php archive_tar to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,35,and avoid the version 32,33,34,35; Upgrade drupal drupal to a higher version than 7.75,8.9.10,8.8.12,9.0.9,and avoid the version [7.0,7.75),[8.0.0,8.9.10),[8.8.0,8.8.12),[9.0.0,9.0.9)