cpanminus Data Forgery Issue Vulnerability (CNVD-2022-02759)

cpanminus is a script that is used to obtain, decompress, build and install modules from CPAN without performing any other operations. cpanminus is vulnerable to a data forgery issue, which can be exploited by attackers to bypass signature verification...

CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

CVE-2020-16155

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

CVE-2020-16155

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

Security feature bypass

CPAN 2.28 allows Signature Verification Bypass...

Code injection

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

CVE-2020-16155

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

UBUNTU-CVE-2020-16155

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

CVE-2020-16156

CVE-2020-16156 affects CPAN/CPAN.pm (notably CPAN 2.28 and its signature verification handling). The root cause is a bypass where an attacker can prepend or manipulate CHECKSUMS to bypass signature verification, enabling installation of tampered modules. Public documents confirm that the issue is...

CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass...

CVE-2020-16155

CVE-2020-16155 affects CPAN::Checksums package 2.12 for Perl. The root cause is that the package does not uniquely define signed data, as described in multiple sources. The available documents confirm the existence of the issue but do not provide specifics on affected products beyond this Perl mo...

CVE-2020-16155

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

CVE-2020-16155

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

PT-2021-9867 · Unknown +2 · Cpan::Checksums +2

Name of the Vulnerable Software and Affected Versions: CPAN::Checksums version 2.12 Description: The issue concerns the CPAN::Checksums package for Perl, which does not uniquely define signed data. This could potentially lead to security issues, although specific details about exploitation or...

CVE-2021-38586

In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...

Advisory ROSA-SA-2021-1993

Software: uuid 1.6.2 OS: Cobalt 7.9 CVE-ID: CVE-2013-4184 CVE-Crit: MEDIUM CVE-DESC: module Data :: Perl UUID from CPAN version 1.219 vulnerable to symbolic link attacks CVE-STATUS: default CVE-REV: default...

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...