CVE catalog

CVE-2020-16155

libcpan-checksums-perl affected and fixed versions

[CVE catalog]

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.00% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixielibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debiantrixielibcpan-checksums-perl2.14-2Fixed[CVE-2020-16155]
Debiansidlibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debiansidlibcpan-checksums-perl2.14-2Fixed[CVE-2020-16155]
Debianforkylibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debianforkylibcpan-checksums-perl2.14-2Fixed[CVE-2020-16155]
Debianbookwormlibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debianbookwormlibcpan-checksums-perl2.14-1Fixed[CVE-2020-16155]
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormlibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debianbookwormlibcpan-checksums-perl2.14-1Fixed[CVE-2020-16155]
Debianforkylibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debianforkylibcpan-checksums-perl2.14-2Fixed[CVE-2020-16155]
Debiansidlibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debiansidlibcpan-checksums-perl2.14-2Fixed[CVE-2020-16155]
Debiantrixielibcpan-checksums-perl2.13-1FixedDistribution-reported fixed boundary[CVE-2020-16155]
Debiantrixielibcpan-checksums-perl2.14-2Fixed[CVE-2020-16155]
Original provider fields
{
  "package_releases": [
    {
      "name": "libcpan-checksums-perl",
      "status": "fixed",
      "release": "sid",
      "version": "2.14-2"
    },
    {
      "name": "libcpan-checksums-perl",
      "status": "fixed",
      "release": "forky",
      "version": "2.14-2"
    },
    {
      "name": "libcpan-checksums-perl",
      "status": "fixed",
      "release": "trixie",
      "version": "2.14-2"
    },
    {
      "name": "libcpan-checksums-perl",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.14-1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1033109,
      "name": "libcpan-checksums-perl",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.13-1"
    },
    {
      "bug": 1033109,
      "name": "libcpan-checksums-perl",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.13-1"
    },
    {
      "bug": 1033109,
      "name": "libcpan-checksums-perl",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.13-1"
    },
    {
      "bug": 1033109,
      "name": "libcpan-checksums-perl",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.13-1"
    }
  ],
  "distribution_packages": []
}

[Debian bug #1033109]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libcpan-checksums-perl]Unknown
    Details (2)

    • 2.14-1 · all · bookworm

      Fixed · Fixed: 2.13-1

      dsa · libcpan-checksums-perl · debian · bookworm; dsa · libcpan-checksums-perl · debian · 12

    • 2.14-1 · all · bookworm

      Fixed · Fixed: 2.13-1

      dsa · libcpan-checksums-perl · debian · bookworm; dsa · libcpan-checksums-perl · debian · 12

[Debian 13 (Trixie)]

  • [libcpan-checksums-perl]Unknown
    Details (2)

    • 2.14-2 · all · trixie

      Fixed · Fixed: 2.13-1

      dsa · libcpan-checksums-perl · debian · 13

    • 2.14-2 · all · trixie

      Fixed · Fixed: 2.13-1

      dsa · libcpan-checksums-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]