USN-5689-1 — perl vulnerability

Summary

It was discovered that Perl incorrectly handled certain signature verification.
An remote attacker could possibly use this issue to bypass signature verification.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	perl	5.26.1-6ubuntu0.6
Ubuntu · 20.04 LTS 20.04:LTS	perl	5.30.0-9ubuntu0.3
Ubuntu · 22.04 LTS 22.04:LTS	perl	5.34.0-3ubuntu1.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	perl	5.18.2-2ubuntu1.7+esm4
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	perl	5.22.1-9ubuntu0.9+esm1

Vulnerabilities 1

Unscored —

CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass.

perl perl Debian Ubuntu

Dec 13, 2021

References

report
https://ubuntu.com/security/CVE-2020-16156

perl vulnerability

Summary

Fixed packages 5

Vulnerabilities 1

CPAN 2.28 allows Signature Verification Bypass.

References