Summary
The panminus is a script to get, unpack, build and install modules from CPAN.
Security Fix(es):
* perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | perl-App-cpanminus | 1.7044-6.module_el8.10.0+3924+8d272be4 |
| AlmaLinux · 8 | perl-CPAN-DistnameInfo | 0.12-13.module_el8.6.0+2810+886f1911 |
| AlmaLinux · 8 | perl-CPAN-Meta-Check | 0.014-6.module_el8.10.0+3924+8d272be4 |
| AlmaLinux · 8 | perl-File-pushd | 1.014-6.module_el8.6.0+2851+b32f1bac |
| AlmaLinux · 8 | perl-Module-CPANfile | 1.1002-7.module_el8.6.0+2792+592c5e39 |
| AlmaLinux · 8 | perl-Parse-PMFile | 0.41-7.module_el8.6.0+2851+b32f1bac |
| AlmaLinux · 8 | perl-String-ShellQuote | 1.04-24.module_el8.6.0+2810+886f1911 |
Vulnerabilities 1
-
Critical 9.8
The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for networ…