Drupal Releases Out-of-Band Security Updates Due to Availability of Exploits

The core updates released for Drupal 7, 8.8, 8.9, and 9.0 on November 25 address a couple of vulnerabilities affecting PEAR Archive_Tar, a third-party library designed for handling .tar files in PHP.