RHSA-2023:6539 Red Hat Security Advisory: perl-CPAN security update

Bulletin has no description...

K000141052: Perl vulnerability CVE-2023-31484

Security Advisory Description CPAN . pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Impact This vulnerability may allow an attacker to inject into the network path and perform a man-in-the-middle MITM attack, causing confidentiality or...

Oracle Linux 8 : perl-CPAN (ELSA-2024-3094)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-3094 advisory. - Fix CVE-2023-31484 - Apply remains of CVE-2016-1238 fix from perl CPAN RT116507 - Fix CVE-2016-1238 properly CPAN RT116507 - Fix CVE-2016-1238 loading optiona...

perl-CPAN security update

2.18-399 - Fix tests to run in correct order 2.18-398 - Fix CVE-2023-31484 - Package tests 2.18-397 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 2.18-396 - Rebase patches to prevent from installing back-up files 2.18-395 - Rebuilt for...

RHEL 8 : perl-CPAN (RHSA-2024:3094)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3094 advisory. The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates...

Moderate: Red Hat Security Advisory: perl-CPAN security update

An update for perl-CPAN is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CentOS 8 : perl-CPAN (CESA-2024:3094)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2024:3094 advisory. - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested for this issue...

ALSA-2024:3094 Moderate: perl-CPAN security update

The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 For more details about the security issues, including the impact, a CVSS score,...

Moderate: perl-CPAN security update

The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 For more details about the security issues, including the impact, a CVSS score,...

Rocky Linux 9 : perl-CPAN (RLSA-2023:6539)

The remote Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2023:6539 advisory. - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested for this issue b...

RHEL 7 : perl-cpan (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 Note that Nessus has not tested f...

RHEL 6 : perl-cpan (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 Note that Nessus has not tested f...

RHEL 6 : perl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perl: heap buffer overflow in pppack.c CVE-2018-6913 - perl: corruption of intermediate language state of...

RLSA-2023:6539 Moderate: perl-CPAN security update

The CPAN module is a tool to query, download and build perl modules from CPAN sites. Security Fixes: perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS CVE-2023-31484 For more details about the security issues, including the impact, a CVSS score,...

perl-CPAN security update

An update is available for perl-CPAN. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The CPAN module is a tool to query, download and build perl modules from CP...

MGASA-2024-0117 Updated perl-Data-UUID packages fix security vulnerability

Perl module Data::UUID from CPAN version 1.219 is vulnerable to symlink attacks. CVE-2013-4184...

Updated perl-Data-UUID packages fix security vulnerability

Perl module Data::UUID from CPAN version 1.219 is vulnerable to symlink attacks. CVE-2013-4184...

CentOS 9 : perl-CPAN-2.29-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the perl- CPAN-2.29-3.el9 build changelog. - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested f...

SUSE: Security Advisory (SUSE-SU-2023:2882-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : perl-CPAN (EulerOS-SA-2023-3443)

According to the versions of the perl-CPAN package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Tenabl...