CPAN 1.9301 Deleted
Security Advisories
CVE-2023-31484
The verify_SSL flag is missing from HTTP::Tiny, and allows a network attacker to MITM the connection if it is used by the CPAN client
- https://github.com/andk/cpanpm/commit/9c98370287f4e709924aee7c58ef21c85289a7f0
- https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
- https://github.com/andk/cpanpm/pull/175
- https://www.openwall.com/lists/oss-security/2023/04/18/14
Fixed version: >=2.35
Reported: 2023-02-28
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass.
- https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
- http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
Fixed version: >=2.29
Severity: high
Reported: 2021-12-13
Kwalitee Issues
No Core Issues.
- meta_yml_declares_perl_version
-
If you are using Build.PL define the {requires}{perl} = VERSION field. If you are using MakeMaker (Makefile.PL) you should upgrade ExtUtils::MakeMaker to 6.48 and use MIN_PERL_VERSION parameter. Perl::MinimumVersion can help you determine which version of Perl your module needs.
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: CPAN, CPAN::Admin, CPAN::Debug, CPAN::DeferedCode, CPAN::Distroprefs, CPAN::FirstTime, CPAN::HandleConfig, CPAN::Kwalify, CPAN::Nox, CPAN::Queue, CPAN::Tarzip, CPAN::Version
- consistent_version
-
Split the distribution, or fix the version numbers to make them consistent (use the highest version number to avoid version downgrade).
Error: 1.9301,5.5,5.50,6
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
- meta_yml_has_repository_resource
-
Add a 'repository' resource to the META.yml via 'meta_add' accessor (for Module::Build) or META_ADD parameter (for ExtUtils::MakeMaker).
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Modules
Name | Abstract | Version | View |
---|---|---|---|
CPAN | query, download and build perl modules from CPAN sites | 1.9301 | metacpan |
CPAN::Admin | A CPAN Shell for CPAN admins | 5.5 | metacpan |
CPAN::Debug | 5.5 | metacpan | |
CPAN::DeferedCode | 5.50 | metacpan | |
CPAN::Distroprefs | read and match distroprefs | 6 | metacpan |
CPAN::FirstTime | Utility for CPAN::Config file Initialization | 5.5 | metacpan |
CPAN::HandleConfig | 5.5 | metacpan | |
CPAN::Kwalify | Interface between CPAN.pm and Kwalify.pm | 5.50 | metacpan |
CPAN::Nox | Wrapper around CPAN.pm without using any XS module | 5.50 | metacpan |
CPAN::Queue | 5.5 | metacpan | |
CPAN::Tarzip | 5.5 | metacpan | |
CPAN::Version | utility functions to compare CPAN versions | 5.5 | metacpan |
Provides
Name | File | View |
---|---|---|
CPAN::Author | lib/CPAN.pm | metacpan |
CPAN::Bundle | lib/CPAN.pm | metacpan |
CPAN::CacheMgr | lib/CPAN.pm | metacpan |
CPAN::Complete | lib/CPAN.pm | metacpan |
CPAN::Distribution | lib/CPAN.pm | metacpan |
CPAN::Distroprefs::Iterator | lib/CPAN/Distroprefs.pm | metacpan |
CPAN::Distroprefs::Pref | lib/CPAN/Distroprefs.pm | metacpan |
CPAN::Distroprefs::Result | lib/CPAN/Distroprefs.pm | metacpan |
CPAN::Distroprefs::Result::Error | lib/CPAN/Distroprefs.pm | metacpan |
CPAN::Distroprefs::Result::Fatal | lib/CPAN/Distroprefs.pm | metacpan |
CPAN::Distroprefs::Result::Success | lib/CPAN/Distroprefs.pm | metacpan |
CPAN::Distroprefs::Result::Warning | lib/CPAN/Distroprefs.pm | metacpan |
CPAN::Distrostatus | lib/CPAN.pm | metacpan |
CPAN::Eval | lib/CPAN.pm | metacpan |
CPAN::Exception::RecursiveDependency | lib/CPAN.pm | metacpan |
CPAN::Exception::yaml_not_installed | lib/CPAN.pm | metacpan |
CPAN::Exception::yaml_process_error | lib/CPAN.pm | metacpan |
CPAN::FTP | lib/CPAN.pm | metacpan |
CPAN::FTP::netrc | lib/CPAN.pm | metacpan |
CPAN::Index | lib/CPAN.pm | metacpan |
CPAN::InfoObj | lib/CPAN.pm | metacpan |
CPAN::LWP::UserAgent | lib/CPAN.pm | metacpan |
CPAN::Mirrored::By | lib/CPAN/FirstTime.pm | metacpan |
CPAN::Module | lib/CPAN.pm | metacpan |
CPAN::Prompt | lib/CPAN.pm | metacpan |
CPAN::Queue::Item | lib/CPAN/Queue.pm | metacpan |
CPAN::Shell | lib/CPAN.pm | metacpan |
CPAN::URL | lib/CPAN.pm | metacpan |