ALT-PU-2022-7821

Высокий

ALT-PU-2022-7821: package perl-App-cpanminus update to version 1.9019-alt1

Источник

errata.altlinux.org

Дата публикации

28.04.2022

Дата обновления

28.04.2022

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades perl-App-cpanminus to version 1.9019-alt1.

Устраненные уязвимости1

CVE-2024-45321

Высокий 8.1

Дата публикации: 27.08.2024

CWE-494

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

CVSS 3.1

Высокий 8.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: High
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2024-45321 https://nvd.nist.gov/vuln/detail/CVE-2024-45321

Ссылки1

ALT-PU-2022-7821 https://errata.altlinux.org/ALT-PU-2022-7821

Связанные уязвимости

CVE-2024-45321

CVSS3: 8.1

ubuntu

около 2 лет назад

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

CVE-2024-45321

CVSS3: 8.1

redhat

около 2 лет назад

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

CVE-2024-45321

CVSS3: 8.1

nvd

около 2 лет назад

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

CVE-2024-45321

CVSS3: 8.1

debian

около 2 лет назад

The App::cpanminus package through 1.7047 for Perl downloads code via ...

RLSA-2024:10219

rocky

почти 2 года назад

Moderate: perl-App-cpanminus:1.7044 security update