Vulnerability in libdatetime-timezone-perl - new upstream version
Summary
DLA-682-1: libdatetime-timezone-perl - new upstream version. Affects libdatetime-timezone-perl versions < 1:1.58-1+2016h. Fixed in 1:1.58-1+2016h. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libdatetime-timezone-perl is a Perl module that provides a simple interface to the Olson timezone database. It allows developers to easily work with timezones and perform timezone conversions in Perl applications. The module is widely used in various Perl projects and is an essential component for handling time-related operations.
Vulnerability Detail
A new upstream version of libdatetime-timezone-perl has been released to address a vulnerability. The vulnerability is related to outdated timezone data (tzdata) used by the Perl bindings. By updating to the new version, the Perl bindings will incorporate the latest changes in tzdata, ensuring accurate and up-to-date timezone information. The vulnerability could potentially lead to incorrect timezone conversions and inaccurate time-related calculations in Perl applications.
How To Fix
Minimum fixed version
1:1.58-1+2016h
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libdatetime-timezone-perlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the libdatetime-timezone-perl package has been found to have a vulnerability related to outdated timezone data. To mitigate this vulnerability, it is crucial to upgrade the package to version 1:1.58-1+2016h or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libdatetime-timezone-perl →
FAQ
libdatetime-timezone-perl is a Perl module that provides a simple interface to the Olson timezone database. It is used for handling timezones and performing timezone conversions in Perl applications.
The vulnerability could result in incorrect timezone conversions and inaccurate time-related calculations in Perl applications that use libdatetime-timezone-perl.
To fix this vulnerability, you should upgrade the libdatetime-timezone-perl package to version 1:1.58-1+2016h or later.
No specific workaround is mentioned for this vulnerability. It is recommended to apply the fix by upgrading the package.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at the following link: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for libdatetime-timezone-perl.
