Red Hat Security AdvisoryRHSA-2024:10219
perl-App-cpanminus:1.7044 security update
Released 2024-11-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) perl-App-cpanminus-1.7044-6.module+el8.10.0+22411+409a293e.noarch::perl-App-cpanminus:1.7044, perl-App-cpanminus-1.7044-6.module+el8.10.0+22411+409a293e.src::perl-App-cpanminus:1.7044, perl-App-cpanminus-1.7044-6.module+el8.10.0+22411+7e3d2305.noarch::perl-App-cpanminus:1.7044 +47
Fixes 1 record
Priority MEDIUM 50
The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00737 · Published 2024-08-27 · Partial fix CWE-494
