Backport upstream commit f2db247bf90d to perl-IO-Compress,
replacing eval-based string interpolation in
File::GlobMapper with a safer delimiter-based approach.
This eliminates the use of eval in globmapper, improving
security of glob pattern mapping. The patch modifies
lib/File/GlobMapper.pm and adds corresponding tests in
t/globmapper.t.
CVE: CVE-2026-48962
Upstream patches:
- f2db247bf9.patch
Resolves: RHEL-180411
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir