Debian Patches

Status for libio-compress-perl/2.213-1+deb13u1

Patch Description Author Forwarded Bugs Origin Last update
autopkgtest.patch set bindir when run under autopkgtest gregor herrmann <gregoa@debian.org> not-needed vendor 2019-11-10
tests-version-skew.patch avoid version skew in t/cz-03zlib-v1.t Avoid version comparison between build time and runtime version, as they
might be different, and assume we always have >= 1.12.2 (true since
bookworm).
gregor herrmann <gregoa@debian.org> not-needed debian vendor 2024-02-22
CVE-2025-15649-tests.diff Add tests for handling zero and invalid datetime values in unzip functionality. Fix for #65

(Backported for Debian by Niko Tyni)
pmqs <pmqs@cpan.org> yes debian upstream backport, https://github.com/pmqs/IO-Compress/commit/739698a7b1bb6814d1aa3c4a1b81374b16a9fea5 2025-10-25
CVE-2025-15649.diff Enhance _dosToUnixTime to handle zero and invalid datetime values; add tests for edge cases. Fixes #65

(Backported for Debian by Niko Tyni)
pmqs <pmqs@cpan.org> yes debian upstream backport, https://github.com/pmqs/IO-Compress/commit/fd28c1d2374eee9811f6d0c5bddc0957abdf1da8 2025-10-25
CVE-2026-48959.diff Fix typo in fastForward #72
(Backported for Debian by Niko Tyni)
pmqs <pmqs@cpan.org> yes debian upstream backport, https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2 2026-05-15
CVE-2026-48961.diff fix: correct unpackValueQ -> unpackValue_Q typo in decodeLitteEndian
(Backported for Debian by Niko Tyni)
Jah-yee <166608075+Jah-yee@users.noreply.github.com> yes debian upstream backport, https://github.com/pmqs/zipdetails/commit/42da886f43ebd2a8c613ad431208b8df20c9cc22 2026-03-08
CVE-2026-48962.diff remove use of eval in globmapper. #73
(Backported for Debian by Niko Tyni)
pmqs <pmqs@cpan.org> yes debian upstream backport, https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610 2026-05-16

All known versions for source package 'libio-compress-perl'

Links