CVE-2015-3407

Name of the Vulnerable Software and Affected Versions Module::Signature versions prior to 0.74

Description The issue allows remote attackers to bypass signature verification for files. This can be achieved by using a signature file that does not list the files.

Recommendations For versions prior to 0.74, update to version 0.74 or later to resolve the issue. As a temporary workaround, consider validating the contents of signature files to ensure they list all relevant files before proceeding with verification.