Archive-Zip 0.10 Deleted
Security Advisories
CVE-2018-10860
perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter.
- https://security-tracker.debian.org/tracker/CVE-2018-10860
- https://github.com/redhotpenguin/perl-Archive-Zip/pull/33
Severity: medium
Reported: 2018-06-28
CVE-2004-1096
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
- http://www.securityfocus.com/bid/11448
- http://www.gentoo.org/security/en/glsa/glsa-200410-31.xml
- http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/492545
- http://secunia.com/advisories/13038/
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:118
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
Reported: 2005-01-10
Kwalitee Issues
- has_meta_yml
-
Add a META.yml to the distribution. Your buildtool should be able to autogenerate it.
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Archive::Zip::Tree
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- meta_yml_has_license
-
Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Archive::Zip, Archive::Zip::BufferedFileHandle, Archive::Zip::MockFileHandle, Archive::Zip::Tree
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Provides
Name | File | View |
---|---|---|
Archive::Zip::Archive | lib/Archive/Zip.pm | metacpan |
Archive::Zip::DirectoryMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::FileMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::Member | lib/Archive/Zip.pm | metacpan |
Archive::Zip::NewFileMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::StringMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::ZipFileMember | lib/Archive/Zip.pm | metacpan |