https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:43:05 +0000 https://vulnerability.circl.lu/vuln/cve-2026-48961 <p><strong>Affected:</strong> PMQS IO::Compress</p> <p>IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID.</p> <p>When decode_ux() in bin/zipdetails handles an Info-ZIP Unix Extra Field (tag 0x7875) with UID Size or GID Size set to 8, causing zipdetails to decode an 8-byte UID or GID value, it dispatches through decodeLitteEndian(), which calls a misnamed helper unpackValueQ. The actual function defined in the same file is unpackValue_Q (with underscore); the call raises &#39;Undefined subroutine &amp;main::unpackValueQ&#39; and the script exits with status 255.</p> <p>Library callers of IO::Compress and IO::Uncompress are not affected; the defect is in the bundled CLI tool.</p> <p><strong>Affected:</strong> PMQS IO::Compress</p> <p>IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID.</p> <p>When decode_ux() in bin/zipdetails handles an Info-ZIP Unix Extra Field (tag 0x7875) with UID Size or GID Size set to 8, causing zipdetails to decode an 8-byte UID or GID value, it dispatches through decodeLitteEndian(), which calls a misnamed helper unpackValueQ. The actual function defined in the same file is unpackValue_Q (with underscore); the call raises &#39;Undefined subroutine &amp;main::unpackValueQ&#39; and the script exits with status 255.</p> <p>Library callers of IO::Compress and IO::Uncompress are not affected; the defect is in the bundled CLI tool.</p> https://vulnerability.circl.lu/vuln/cve-2026-48961