Archive-Zip 1.16
Security Advisories
CVE-2018-10860
perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter.
- https://security-tracker.debian.org/tracker/CVE-2018-10860
- https://github.com/redhotpenguin/perl-Archive-Zip/pull/33
Severity: medium
Reported: 2018-06-28
Kwalitee Issues
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Archive::Zip::Tree
- meta_yml_declares_perl_version
-
If you are using Build.PL define the {requires}{perl} = VERSION field. If you are using MakeMaker (Makefile.PL) you should upgrade ExtUtils::MakeMaker to 6.48 and use MIN_PERL_VERSION parameter. Perl::MinimumVersion can help you determine which version of Perl your module needs.
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- meta_yml_has_license
-
Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Archive::Zip, Archive::Zip::BufferedFileHandle, Archive::Zip::MemberRead, Archive::Zip::MockFileHandle, Archive::Zip::Tree
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
- meta_yml_has_repository_resource
-
Add a 'repository' resource to the META.yml via 'meta_add' accessor (for Module::Build) or META_ADD parameter (for ExtUtils::MakeMaker).
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Provides
Name | File | View |
---|---|---|
Archive::Zip::Archive | lib/Archive/Zip.pm | metacpan |
Archive::Zip::DirectoryMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::FileMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::Member | lib/Archive/Zip.pm | metacpan |
Archive::Zip::NewFileMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::StringMember | lib/Archive/Zip.pm | metacpan |
Archive::Zip::ZipFileMember | lib/Archive/Zip.pm | metacpan |