218 matches found
Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
CVE-2020-16155
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...
Alibaba Cloud Linux 3 : 0140: perl-CPAN (ALINUX3-SA-2024:0140)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0140 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-31484: CPAN.pm before 2.35 does not verify...
RLSA-2024:3094 Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 For more details about the security issues, including the impact, a CVSS score,...
perl-CPAN bug fix update
An update is available for perl-CPAN. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The CPAN module is a tool to query, download and build perl modules from CP...
perl-CPAN security update
An update is available for perl-CPAN. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The CPAN module is a tool to query, download and build perl modules from CP...
Linux Distros Unpatched Vulnerability : CVE-2020-16155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data. CVE-2020-16155 Note that Nessus relies on the presence of the package as reporte...
perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability
A flaw was found in App::cpanminus cpanm through version 1.7047. The default configuration downloads Perl modules from CPAN using HTTP, which could allow an attacker to view or modify the content without the knowledge of the user. This issue could allow an attacker to execute malicious code if th...
Moderate: perl-App-cpanminus:1.7044 security update
The panminus is a script to get, unpack, build and install modules from CPAN. Security Fixes: perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...
[SECURITY] [DLA 3926-1] perl security update
Debian LTS Advisory DLA-3926-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 21, 2024 https://wiki.debian.org/LTS Package : perl Version : 5.32.1-4+deb11u4 CVE ID : CVE-2020-16156 CVE-2023-31484 Debian Bug : 1015985 1035109 Vulnerabilities were found in...
RHSA-2024:3094 Red Hat Security Advisory: perl-CPAN security update
Bulletin has no description...
RHSA-2023:6539 Red Hat Security Advisory: perl-CPAN security update
Bulletin has no description...
K000141052: Perl vulnerability CVE-2023-31484
Security Advisory Description CPAN . pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Impact This vulnerability may allow an attacker to inject into the network path and perform a man-in-the-middle MITM attack, causing confidentiality or...
Oracle Linux 8 : perl-CPAN (ELSA-2024-3094)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-3094 advisory. - Fix CVE-2023-31484 - Apply remains of CVE-2016-1238 fix from perl CPAN RT116507 - Fix CVE-2016-1238 properly CPAN RT116507 - Fix CVE-2016-1238 loading optiona...
perl-CPAN security update
2.18-399 - Fix tests to run in correct order 2.18-398 - Fix CVE-2023-31484 - Package tests 2.18-397 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 2.18-396 - Rebase patches to prevent from installing back-up files 2.18-395 - Rebuilt for...
RHEL 8 : perl-CPAN (RHSA-2024:3094)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3094 advisory. The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates...
Moderate: Red Hat Security Advisory: perl-CPAN security update
An update for perl-CPAN is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 For more details about the security issues, including the impact, a CVSS score,...
ALSA-2024:3094 Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 For more details about the security issues, including the impact, a CVSS score,...
CentOS 8 : perl-CPAN (CESA-2024:3094)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:3094 advisory. - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested for this issue...