{"schemaVersion":3,"id":"OPENSUSE-SU-2026:21177-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for perl-IO-Compress\n\nThis update for perl-IO-Compress fixes the following issues:\n\nChanges in perl-IO-Compress:\n\n- updated to 2.220.0 (2.220)\n   see /usr/share/doc/packages/perl-IO-Compress/Changes\n\n    2.220 16 May 2026\n      * remove use of eval in globmapper. #73\n        CVE-2026-48962 bsc#1266382\n      * Update zipdetails to version 4.006.\n        CVE-2026-48961 bsc#1266381\n      * Fix typo in fastForward #72\n      * Fix issue with \"rawdeflate` option in AnyInflate. #71\n\n- updated to 2.219.0 (2.219)\n   see /usr/share/doc/packages/perl-IO-Compress/Changes\n\n    2.219 9 March 2026\n      * Fix a few  typos\n      * Squash repeated semicolons\n      * Make dependent version checking consistent amd update module to version 2.219. Fixes #70\n    2.218 8 March 2026\n      * Refresh zipdetails to version 4.005 Sourced from https://github.com/pmqs/zipdetails\n      * version 2.218\n      * Add SECURITY.md,  Fixes #69\n      * fix spelling typo\n      * Refresh Changes file\n      * Update release date in README\n      * Refresh zipdetails from https://github.com/pmqs/zipdetails\n    2.217 1 February 2026\n      * Update release date in README\n      * Refresh zipdetails from https://github.com/pmqs/zipdetails\n      * Delete GZIP environment variable before running interop tests Fixes #24\n      * Update version to 2.217\n    2.216 31 January 2026\n        * Update version to 2.216\n        * IO::Compress @2.215: t/006zip.t fails due to missing test files #67\n    2.215 31 January 2026\n        * Fix version check in 000prereq.t\n        * Update Changes for 2.215\n        * Update version to 2.215 & change copyright year to 2026\n        * Add tests for handling zero and invalid datetime values in unzip functionality. Fix for #65\n        * Enhance _dosToUnixTime to handle zero and invalid datetime values; add tests for edge cases. Fixes #65\n\n- updated to 2.214.0 (2.214)\n   see /usr/share/doc/packages/perl-IO-Compress/Changes\n\n    2.214 24 October 2025\n        * version 2.214\n        * IO::Compress::Gzip accidentally modifies the `$EXPORT_TAGS{all}->@*` of other modules Fixes #64\n        * Fix indentation in Windows workflow YAML\n        * Fix indentation in windows.yml exclude section\n        * Merge pull request #63 from masiuchi/fix/ci-errors\n        * Exclude Perl 5.42 with \"strawberry\" distribution from GitHub Actions\n        * Update FreeBSD image to 14.3 in Cirrus CI\n        * Add dependabot.yml file to police workflow files\n        * Add perl 5.42 to workflow files\n        * Fix for https://github.com/pmqs/Compress-Raw-Zlib/issues/34\n        * #59 fix typos in streamzip","dates":{"published":"2026-06-30T09:10:12.000Z","modified":"2026-07-02T18:24:19.908Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"perl-IO-Compress&distro=openSUSE Leap 16.0","name":"perl-IO-Compress","label":"perl-IO-Compress&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/perl-IO-Compress&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 2.220.0-bp160.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.220.0-bp160.1.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugzilla.suse.com/1266381","label":"bugzilla.suse.com/1266381","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1266382","label":"bugzilla.suse.com/1266382","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48961","label":"www.suse.com/security/cve/CVE-2026-48961","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48962","label":"www.suse.com/security/cve/CVE-2026-48962","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-48961","CVE-2026-48962"],"downstream":[],"duplicates":[],"related":["CVE-2026-48961","CVE-2026-48962"]},"timeline":[{"kind":"published","date":"2026-06-30T09:10:12.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-02T18:24:19.908Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T23:58:43.253Z","stale":false,"partial":false}}