openSUSE-SU-2026:21177-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21177-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:21177-1
Upstream
Related
Published
2026-06-30T09:10:12Z
Modified
2026-07-02T18:24:16Z
Summary
Security update for perl-IO-Compress
Details

This update for perl-IO-Compress fixes the following issues:

Changes in perl-IO-Compress:

  • updated to 2.220.0 (2.220) see /usr/share/doc/packages/perl-IO-Compress/Changes

    2.220 16 May 2026 * remove use of eval in globmapper. #73 CVE-2026-48962 bsc#1266382 * Update zipdetails to version 4.006. CVE-2026-48961 bsc#1266381 * Fix typo in fastForward #72 * Fix issue with "rawdeflate` option in AnyInflate. #71

  • updated to 2.219.0 (2.219) see /usr/share/doc/packages/perl-IO-Compress/Changes

    2.219 9 March 2026 * Fix a few typos * Squash repeated semicolons * Make dependent version checking consistent amd update module to version 2.219. Fixes #70 2.218 8 March 2026 * Refresh zipdetails to version 4.005 Sourced from https://github.com/pmqs/zipdetails * version 2.218 * Add SECURITY.md, Fixes #69 * fix spelling typo * Refresh Changes file * Update release date in README * Refresh zipdetails from https://github.com/pmqs/zipdetails 2.217 1 February 2026 * Update release date in README * Refresh zipdetails from https://github.com/pmqs/zipdetails * Delete GZIP environment variable before running interop tests Fixes #24 * Update version to 2.217 2.216 31 January 2026 * Update version to 2.216 * IO::Compress @2.215: t/006zip.t fails due to missing test files #67 2.215 31 January 2026 * Fix version check in 000prereq.t * Update Changes for 2.215 * Update version to 2.215 & change copyright year to 2026 * Add tests for handling zero and invalid datetime values in unzip functionality. Fix for #65 * Enhance _dosToUnixTime to handle zero and invalid datetime values; add tests for edge cases. Fixes #65

  • updated to 2.214.0 (2.214) see /usr/share/doc/packages/perl-IO-Compress/Changes

    2.214 24 October 2025 * version 2.214 * IO::Compress::Gzip accidentally modifies the $EXPORT_TAGS{all}->@* of other modules Fixes #64 * Fix indentation in Windows workflow YAML * Fix indentation in windows.yml exclude section * Merge pull request #63 from masiuchi/fix/ci-errors * Exclude Perl 5.42 with "strawberry" distribution from GitHub Actions * Update FreeBSD image to 14.3 in Cirrus CI * Add dependabot.yml file to police workflow files * Add perl 5.42 to workflow files * Fix for https://github.com/pmqs/Compress-Raw-Zlib/issues/34 * #59 fix typos in streamzip

References

Affected packages

openSUSE:Leap 16.0 / perl-IO-Compress

Package

Name
perl-IO-Compress
Purl
pkg:rpm/opensuse/perl-IO-Compress&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.220.0-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "perl-IO-Compress":  "2.220.0-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21177-1.json"