A new Debian Linux update has been published: DLA 2465-1: php-pear security update
A php-pear security update has been released for Debian GNU/Linux 9 LTS to address a filename sanitisation issue in php-pear.Read more @ Linux Compatible