OPENSUSE-SU-2024:11783-1 perl-App-cpanminus-1.7045-1.1 on GA media

These are all security issues fixed in the perl-App-cpanminus-1.7045-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 : perl-app-cpanminus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-App-cpanminus: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16154 Note that Nessus has not...

RHEL 9 : perl-app-cpanminus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-App-cpanminus: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16154 Note that Nessus has not...

RHEL 7 : perl-app-cpanminus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-App-cpanminus: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16154 Note that Nessus has not...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : App::cpanminus vulnerability (USN-5230-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5230-1 advisory. It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signatu...

SUSE CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...

Ubuntu: Security Advisory (USN-5230-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

new packages: perl-App-cpanminus

An update is available for perl-App-cpanminus. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Huawei EulerOS: Security Advisory for perl-App-cpanminus (EulerOS-SA-2022-1579)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : perl-App-cpanminus (EulerOS-SA-2022-1579)

According to the versions of the perl-App-cpanminus package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. CVE-2020-16154 Note that Tenable Network Security ha...

OPENSUSE-SU-2022:0074-1 Security update for perl-App-cpanminus

This update for perl-App-cpanminus fixes the following issues: updated to 1.7045 see /usr/share/doc/packages/perl-App-cpanminus/Changes Security fixes: - CVE-2020-16154 remove the functionality to verify CHECKSUMS signature updated to 1.7044 see /usr/share/doc/packages/perl-App-cpanminus/Changes...

Security update for perl-App-cpanminus (moderate)

openSUSE Security Update: Security update for perl-App-cpanminus Announcement ID: openSUSE-SU-2022:0074-1 Rating: moderate References: Cross-References: CVE-2020-16154 CVSS scores: CVE-2020-16154 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-S...

Mageia: Security Advisory (MGASA-2022-0078)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated cpanminus packages fix security vulnerability

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. CVE-2020-16154...

MGASA-2022-0078 Updated cpanminus packages fix security vulnerability

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. CVE-2020-16154...

[SECURITY] Fedora 35 Update: perl-App-cpanminus-1.7045-1.fc35

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM...

Fedora: Security Advisory for perl-App-cpanminus (FEDORA-2022-f4b7f896e3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Incorrect Signature Verification

cpanminus, sid is vulnerable to signature verification bypass. The vulnerability exists due to a lack of input sanitization allow attacker to prepend checksums for modified packages to the beginning of CHECKSUMS files,...

USN-5230-1 cpanminus vulnerability

It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signature verification, gaining access to sensitive data or possibly executing unauthorized code...

USN-5230-1: App::cpanminus vulnerability

It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signature verification, gaining access to sensitive data or possibly executing unauthorized code...