Red Hat Security AdvisoryRHSA-2026:30086
perl-IO-Compress security update
Released 2026-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) perl-IO-Compress-2.081-1.el8_8.1
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) perl-IO-Compress-2.081-1.el8_8.1
Fixes 1 record
Priority LOW 38
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00439 · Published 2026-05-27 · Fixed in 2.220 CWE-95
