Most recent entries from all

ALSA-2024:10218 — Moderate: perl-App-cpanminus security update

Affected: AlmaLinux:9: perl-App-cpanminus

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM.

Security Fix(es):

* perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BREW-cpanminus-CVE-2024-45321

Affected: Homebrew: cpanminus

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

EUVD-2026-161783

fkie_cve-2024-45321

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

GHSA-9mmm-86g7-vp9g

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

openSUSE-SU-2024:14291-1 — perl-App-cpanminus-1.7047-2.1 on GA media

perl-App-cpanminus-1.7047-2.1 on GA media

RHSA-2024:10219 — Red Hat Security Advisory: perl-App-cpanminus:1.7044 security update

perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability

UBUNTU-CVE-2024-45321

Affected: Ubuntu:Pro:16.04:LTS: cpanminus, Ubuntu:Pro:18.04:LTS: cpanminus, Ubuntu:Pro:20.04:LTS: cpanminus, Ubuntu:22.04:LTS: cpanminus, Ubuntu:24.04:LTS: cpanminus, Ubuntu:25.10: cpanminus, Ubuntu:26.04:LTS: cpanminus

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

WID-SEC-W-2024-3539 — Red Hat Enterprise Linux (perl-App-cpanminus): Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.