PEAR’s (PHP Extension and Application Repository) web server disabled due to a security breach
Last week, the researchers at PEAR ( PHP Extension and Application Repository) reported a security breach on PEAR’s web server, http://pear.php.net.
They found that the go-pear.phar was breached. Following this, the PEAR website itself has been disabled until a known clean site can be rebuilt. The community tweeted that “a more detailed announcement will be on the PEAR Blog once it’s back online”.
A security breach has been found on the https://t.co/dwKlscDEFf webserver, with a tainted go-pear.phar discovered.
The PEAR website itself has been disabled until a known clean site can be rebuilt. A more detailed announcement will be on the PEAR Blog once it’s back online.— PEAR (@pear) January 19, 2019
According to researchers, the users who have downloaded the go-pear.phar in the past six months should get a new copy of the same release version from GitHub (pear/pearweb_phars) and compare file hashes. If the hashes are different, this indicates that the user may have the infected file. The community is in the process of rebuilding the site; however, they are not sure of the ETA yet.
To stay updated, keep a close watch on PEAR’s twitter account.
Read Next
Symfony leaves PHP-FIG, the framework interoperability group
Internal memo reveals NASA suffered a data breach compromising employees social security numbers
*** This is a Security Bloggers Network syndicated blog from Security News – Packt Hub authored by Savia Lobo. Read the original post at: https://hub.packtpub.com/pears-php-extension-and-application-repository-web-server-disabled-due-to-a-security-breach/
