Debian Perl vulnerabilities

CVE-2002-1323 [MEDIUM] CVE-2002-1323: perl - Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attack... Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls. Scope: local bookworm: resolved (fixed in 5.8.0-14) bullseye: resolved (fixed in 5.8.0-14) forky: resolved (fixed in 5.8.0-14) sid: resolved

CVE-2014-4330 [LOW] CVE-2014-4330: perl - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earli... The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function. Scope: local bookworm: resolved (fixed in 5.20.1-1) bullseye: re

CVE-2003-0618 [LOW] CVE-2003-0618: perl - Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obt... Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions. Scope: local bookworm: resolved (fixed in 5.8.3-3) bullseye: resolved (fixed in 5.8.3-3) forky: resolved (fixed in 5.8.3-3) sid: resolved (fixed in 5.8.3-3) trixie: resolved (fixed in 5.8.3-3)

CVE-2004-0976 [LOW] CVE-2004-0976: perl - Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and... Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files. Scope: local bookworm: resolved (fixed in 5.8.4-4) bullseye: resolved (fixed in 5.8.4-4) forky: resolved (fixed in 5.8.4-4) sid: resolved (fixed in 5.8.4-4) trixie: resolved (fixed in 5.8.4-

CVE-2020-16156 [HIGH] CVE-2020-16156: perl - CPAN 2.28 allows Signature Verification Bypass. CPAN 2.28 allows Signature Verification Bypass. Scope: local bookworm: resolved (fixed in 5.36.0-4) bullseye: resolved (fixed in 5.32.1-4+deb11u4) forky: resolved (fixed in 5.36.0-4) sid: resolved (fixed in 5.36.0-4) trixie: resolved (fixed in 5.36.0-4)