CPAN 1.45
- Released by
- ANDK
- Version
- Release Date
- 1999-01-23
- Kwalitee
- 128.12
- Core Kwalitee
- 84.38
- LINKS
CPAN 1.45 Deleted
Security Advisories
CVE-2023-31484
The verify_SSL flag is missing from HTTP::Tiny, and allows a network attacker to MITM the connection if it is used by the CPAN client
- https://github.com/andk/cpanpm/commit/9c98370287f4e709924aee7c58ef21c85289a7f0
- https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
- https://github.com/andk/cpanpm/pull/175
- https://www.openwall.com/lists/oss-security/2023/04/18/14
Fixed version: >=2.35
Reported: 2023-02-28
Archive::Tar preserves permissions in the tarball; extracted file permissions will be set from users umask instead.
- https://github.com/andk/cpanpm/commit/079fa2e7ee77d626eab8bb06d0465c6a05f6c8b6
- https://rt.cpan.org/Ticket/Display.html?id=46384
Fixed version: >=1.93
Reported: 2009-09-23
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass.
- https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
- http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
Fixed version: >=2.29
Severity: high
Reported: 2021-12-13
Kwalitee Issues
- has_meta_yml
-
Add a META.yml to the distribution. Your buildtool should be able to autogenerate it.
- has_human_readable_license
-
Add a section called "LICENSE" to the documentation, or add a file named LICENSE to the distribution.
- has_license_in_source_file
-
Add =head1 LICENSE and the text of the license to the main module in your code.
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Bundle::CPAN, CPAN::Nox
- no_pod_errors
-
Remove the POD errors. You can check for POD errors automatically by including Test::Pod to your test suite.
Error: CPAN-1.45/lib/Bundle/CPAN.pm -- Around line 62: Non-ASCII character seen before =encoding in 'König'. Assuming CP1252 CPAN-1.45/lib/CPAN.pm -- Around line 4191: Non-ASCII character seen before =encoding in 'König'. Assuming CP1252
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- meta_yml_has_license
-
Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.
- has_known_license_in_source_file
-
Add =head1 LICENSE and/or the proper text of the well-known license to the main module in your code.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Bundle::CPAN, CPAN, CPAN::FirstTime, CPAN::Nox
- consistent_version
-
Split the distribution, or fix the version numbers to make them consistent (use the highest version number to avoid version downgrade).
Error: 1.33,1.40,1.45
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Provides
| Name | File | View |
|---|---|---|
| CPAN::Author | lib/CPAN.pm | metacpan |
| CPAN::Bundle | lib/CPAN.pm | metacpan |
| CPAN::CacheMgr | lib/CPAN.pm | metacpan |
| CPAN::Complete | lib/CPAN.pm | metacpan |
| CPAN::Config | lib/CPAN.pm | metacpan |
| CPAN::Debug | lib/CPAN.pm | metacpan |
| CPAN::Distribution | lib/CPAN.pm | metacpan |
| CPAN::Eval | lib/CPAN.pm | metacpan |
| CPAN::FTP | lib/CPAN.pm | metacpan |
| CPAN::FTP::netrc | lib/CPAN.pm | metacpan |
| CPAN::Index | lib/CPAN.pm | metacpan |
| CPAN::InfoObj | lib/CPAN.pm | metacpan |
| CPAN::Mirrored::By | lib/CPAN/FirstTime.pm | metacpan |
| CPAN::Module | lib/CPAN.pm | metacpan |
| CPAN::Queue | lib/CPAN.pm | metacpan |
| CPAN::Shell | lib/CPAN.pm | metacpan |
| CPAN::Tarzip | lib/CPAN.pm | metacpan |