Rocky Linux 8 [CIQ] Security Update: perl-CPAN (crlsa-2025_8432)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20258432 advisory. perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 Tenable has extracted the preceding description block directly from the CIQ securi...

TencentOS Server 3: perl-CPAN (TSSA-2025:0420)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0420 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

RHEL 8 : perl-CPAN (RHSA-2025:8432)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:8432 advisory. The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl-CPAN: Bypass of verification of signatures ...

Signature Verification Bypass

perl is vulnerable to signature verification bypass. The vulnerability exists in CHECKSUMS files which allows an attacker to use this flaw to bypass signature verification...