perl-IO-Compress vulnerabilities (Mageia)
4 vulnerabilities.
-
perl-IO-CompressMageia IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob 7.3 High -
perl-IO-CompressMageia IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID 7.3 High -
perl-IO-CompressMageia IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward 7.5 High -
perl-IO-CompressMageia IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date 5.5 Medium