Описание
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libcpan-checksums-perl | fixed | 2.13-1 | package | |
| libcpan-checksums-perl | no-dsa | bullseye | package | |
| libcpan-checksums-perl | no-dsa | buster | package | |
| libcpan-checksums-perl | no-dsa | stretch | package |
Примечания
https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
https://github.com/andk/cpan-checksums/commit/9d2f5f26470ff7ce53ef697d09790fc4db451ab1 (2.13)
EPSS
Процентиль: 63%
0.00996
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
почти 5 лет назад
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.
CVSS3: 6.5
nvd
почти 5 лет назад
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.
github
почти 5 лет назад
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.
CVSS3: 6.5
altlinux
почти 5 лет назад
ALT-PU-2021-3372: package `perl-CPAN-Checksums` update to version 2.13-alt1
EPSS
Процентиль: 63%
0.00996
Низкий