Debian Linux Security Advisory 4445-1 - It was discovered that incomplete validation in a Phar processing library embedded in Drupal, a fully-featured content management framework, could result in information disclosure.
431ac211572b6d434dd92acf7696b7b4f7053893024b3a4e795dbc334130c617