CVE:CVE-2020-16154
CNNVD:CNNVD-202112-1046
cpanminus是一个脚本，用于从 CPAN 获取、解压、构建和安装模块，不执行其他任何操作。
App::cpanminus package 1.7044版本存在安全漏洞，攻击者可以通过该漏洞绕过签名验证。
solution:Upgrade app  to a higher version than cpanminus_project:app,and avoid the version cpanminus_project:app; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35