{"id":"openSUSE-SU-2026:21177-1","summary":"Security update for perl-IO-Compress","details":"This update for perl-IO-Compress fixes the following issues:\n\nChanges in perl-IO-Compress:\n\n- updated to 2.220.0 (2.220)\n   see /usr/share/doc/packages/perl-IO-Compress/Changes\n\n    2.220 16 May 2026\n      * remove use of eval in globmapper. #73\n        CVE-2026-48962 bsc#1266382\n      * Update zipdetails to version 4.006.\n        CVE-2026-48961 bsc#1266381\n      * Fix typo in fastForward #72\n      * Fix issue with \"rawdeflate` option in AnyInflate. #71\n\n- updated to 2.219.0 (2.219)\n   see /usr/share/doc/packages/perl-IO-Compress/Changes\n\n    2.219 9 March 2026\n      * Fix a few  typos\n      * Squash repeated semicolons\n      * Make dependent version checking consistent amd update module to version 2.219. Fixes #70\n    2.218 8 March 2026\n      * Refresh zipdetails to version 4.005 Sourced from https://github.com/pmqs/zipdetails\n      * version 2.218\n      * Add SECURITY.md,  Fixes #69\n      * fix spelling typo\n      * Refresh Changes file\n      * Update release date in README\n      * Refresh zipdetails from https://github.com/pmqs/zipdetails\n    2.217 1 February 2026\n      * Update release date in README\n      * Refresh zipdetails from https://github.com/pmqs/zipdetails\n      * Delete GZIP environment variable before running interop tests Fixes #24\n      * Update version to 2.217\n    2.216 31 January 2026\n        * Update version to 2.216\n        * IO::Compress @2.215: t/006zip.t fails due to missing test files #67\n    2.215 31 January 2026\n        * Fix version check in 000prereq.t\n        * Update Changes for 2.215\n        * Update version to 2.215 & change copyright year to 2026\n        * Add tests for handling zero and invalid datetime values in unzip functionality. Fix for #65\n        * Enhance _dosToUnixTime to handle zero and invalid datetime values; add tests for edge cases. Fixes #65\n\n- updated to 2.214.0 (2.214)\n   see /usr/share/doc/packages/perl-IO-Compress/Changes\n\n    2.214 24 October 2025\n        * version 2.214\n        * IO::Compress::Gzip accidentally modifies the `$EXPORT_TAGS{all}-\u003e@*` of other modules Fixes #64\n        * Fix indentation in Windows workflow YAML\n        * Fix indentation in windows.yml exclude section\n        * Merge pull request #63 from masiuchi/fix/ci-errors\n        * Exclude Perl 5.42 with \"strawberry\" distribution from GitHub Actions\n        * Update FreeBSD image to 14.3 in Cirrus CI\n        * Add dependabot.yml file to police workflow files\n        * Add perl 5.42 to workflow files\n        * Fix for https://github.com/pmqs/Compress-Raw-Zlib/issues/34\n        * #59 fix typos in streamzip\n","modified":"2026-07-02T18:24:16.014991569Z","published":"2026-06-30T09:10:12Z","related":["CVE-2026-48961","CVE-2026-48962"],"upstream":["CVE-2026-48961","CVE-2026-48962"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1266381"},{"type":"REPORT","url":"https://bugzilla.suse.com/1266382"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-48961"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-48962"}],"affected":[{"package":{"name":"perl-IO-Compress","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/perl-IO-Compress&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.220.0-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"perl-IO-Compress":"2.220.0-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21177-1.json"}}],"schema_version":"1.7.5"}