PEAR Archive_Tar versions prior to 1.4.4 suffers from a php object injection vulnerability. Continue reading...