tocsin

Debian/libio-compress-perl: high 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in do

Action: Upgrade libio-compress-perl to 2.204-1+deb12u1 or later.

Affected

introducedfixedlast affected
02.204-1+deb12u1-

Fixed versions

2.204-1+deb12u1

Sources

published · modified · JSON