| Package | libio-compress-perl |
|---|---|
| Version | 2.101-1+deb11u1 (bullseye) |
| Related CVEs | CVE-2025-15649 CVE-2026-48959 CVE-2026-48962 |
Multiple vulnerabilities were discovered in libio-compress-perl, a Perl library to allow reading and writing of compressed data.
CVE-2025-15649
Uncaught exception when parsing zip header with malformed DOS date.
CVE-2026-48959
CPU exhaustion via per-byte read loop in fastForward.
CVE-2026-48962
Arbitrary code in File::GlobMapper via an attacker-controlled output
glob.
For Debian 11 bullseye, these problems have been fixed in version 2.101-1+deb11u1.
We recommend that you upgrade your libio-compress-perl packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.