Vulnerability in libdatetime-timezone-perl - new upstream version
Summary
DLA-857-1: libdatetime-timezone-perl - new upstream version. Affects libdatetime-timezone-perl versions < 1:1.58-1+2017a. Fixed in 1:1.58-1+2017a. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libdatetime-timezone-perl is a Perl module that provides a simple interface to the Olson timezone database. It allows Perl programs to easily convert between different timezones and perform timezone-related calculations. This vulnerability affects version 1:1.58-1+2017a of the package in Debian 7 Wheezy.
Vulnerability Detail
The vulnerability in libdatetime-timezone-perl is related to the tzdata 2017a update for the Perl bindings. This update addresses various issues and updates the timezone data. The specific details of the changes can be found in DLA-856-1. The vulnerability could potentially lead to incorrect timezone conversions and calculations in Perl programs that use this module.
How To Fix
Minimum fixed version
1:1.58-1+2017a
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libdatetime-timezone-perlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The vulnerability in libdatetime-timezone-perl can be fixed by upgrading the package to version 1:1.58-1+2017a or later. It is important to ensure that the package is updated to prevent potential issues with timezone conversions and calculations in Perl programs. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for libdatetime-timezone-perl →
FAQ
libdatetime-timezone-perl is a Perl module that provides timezone functionality for Perl programs.
The vulnerability could result in incorrect timezone conversions and calculations in Perl programs using libdatetime-timezone-perl.
You can check the version of libdatetime-timezone-perl installed on your Debian 7 Wheezy system. If it is version 1:1.58-1+2017a or later, you are not affected by this vulnerability.
There are no known workarounds for this vulnerability. It is recommended to upgrade the libdatetime-timezone-perl package to the fixed version.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki.
Related vulnerabilities
Recent vulnerabilities recorded for libdatetime-timezone-perl.
