Advisory ROSA-SA-2025-2661

software: perl 5.30.3 OS: ROSA-CHROME packageevrstring: perl-5.30.3 CVE-ID: CVE-2023-47100 BDU-ID: 2023-08382 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the Sparseunipropstring function of the regcomp.c file of the Perl programming language interpreter is related to an operation exceeding...

Medium: perl-Module-ScanDeps

Issue Overview: Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...

Amazon Linux 2 : perl-Module-ScanDeps (ALAS-2025-2738)

The version of perl-Module-ScanDeps installed on the remote host is prior to 1.10-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2738 advisory. Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local...

Medium: perl-Module-ScanDeps

Issue Overview: Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...

Debian dla-3702 : libspreadsheet-parseexcel-perl - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3702 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3702-1 [email protected] https://www.debian.org/lts/security/...

Huawei EulerOS: Security Advisory for perl-App-cpanminus (EulerOS-SA-2025-1127)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : perl-App-cpanminus (EulerOS-SA-2025-1127)

According to the versions of the perl-App-cpanminus package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network...

OESA-2025-1041 perl-FCGI security update

FastCGI Perl bingdings. Security Fixes: CVE-2012-6687...

perl-IO-Compress-2.213.0-1.1 on GA media (moderate)

perl-IO-Compress-2.213.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14657-1 Rating: moderate Cross-References: CVE-2016-1238 CVSS scores: CVE-2016-1238 SUSE : 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

OPENSUSE-SU-2025:14657-1 perl-IO-Compress-2.213.0-1.1 on GA media

These are all security issues fixed in the perl-IO-Compress-2.213.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14656-1 perl-Compress-Raw-Zlib-2.213-1.1 on GA media

These are all security issues fixed in the perl-Compress-Raw-Zlib-2.213-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 40 Update: perl-Net-OAuth-0.30-1.fc40

Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...

[SECURITY] Fedora 41 Update: perl-Net-OAuth-0.30-1.fc41

Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...

Fedora 40 : perl-Net-OAuth (2025-05e642f1ef)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-05e642f1ef advisory. Update to 0.30, fixes CVE-2025-22376 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 41 : perl-Net-OAuth (2025-f0077db20c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f0077db20c advisory. Update to 0.30, fixes CVE-2025-22376 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora: Security Advisory (FEDORA-2025-05e642f1ef)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2025-2552

Software: perl 5.16.3 OS: rosa-server79 packageevrstring: perl-5.16.3-299.0.2.res7 CVE-ID: CVE-2015-8853 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in Perl allows an attacker to cause a denial of service via crafted utf-8 data. CVE-STATUS: The vulnerability has been resolved. CVE-RE...

perl-Module-ScanDeps-1.370.0-1.1 on GA media (moderate)

perl-Module-ScanDeps-1.370.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14635-1 Rating: moderate Cross-References: CVE-2024-10224 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2025:14635-1 perl-Module-ScanDeps-1.370.0-1.1 on GA media

These are all security issues fixed in the perl-Module-ScanDeps-1.370.0-1.1 package on the GA media of openSUSE Tumbleweed...

Medium: perl-Module-ScanDeps

Issue Overview: Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...