Описание
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| cpanminus | fixed | 1.7045-1 | package | |
| cpanminus | no-dsa | bullseye | package | |
| cpanminus | no-dsa | buster | package | |
| cpanminus | no-dsa | stretch | package |
Примечания
https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
Связанные уязвимости
CVSS3: 7.8
ubuntu
около 4 лет назад
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
CVSS3: 7.8
redhat
около 4 лет назад
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
CVSS3: 7.8
nvd
около 4 лет назад
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
github
почти 4 года назад
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.