UBUNTU-CVE-2023-31484

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS...

Default configuration

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates...

CVE-2023-31484

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS...

CVE-2023-31486

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates...

Fedora: Security Advisory for perl-Alien-ProtoBuf (FEDORA-2022-15729fa33d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-31486

CVE-2023-31486 affects the HTTP::Tiny Perl HTTP client (before 0.083). Insecure default TLS verification requires opt-in to verify certificates, enabling MITM risk. Affected: HTTP::Tiny (Perl module, CPAN) used with older TLS defaults. Impact is high (confidentiality, integrity, and availability)...

CVE-2023-31486

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates...

[SECURITY] Fedora 36 Update: perl-Alien-ProtoBuf-0.09-17.fc36

Depending on Alien::ProtoBuf Perl module ensures the Protocol Buffers library is installed on your system...

Updated perl-Cpanel-JSON-XS packages fix security vulnerability

Fixes some bugs including a security vulnerability when decoding hash keys without ending ':'...

MGASA-2023-0120 Updated perl-Net-Server packages fix security vulnerability

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter. CVE-2013-1841...

MGASA-2023-0119 Updated perl-Cpanel-JSON-XS packages fix security vulnerability

Fixes some bugs including a security vulnerability when decoding hash keys without ending ':'...

Mageia: Security Advisory (MGASA-2023-0120)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0119)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0096)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Perl programming language’s Module::Signature::_verify() function allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Perl programming language’s Module::Signature::verify function is related to improper verification of the cryptographic signature of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

SUSE: Security Advisory (SUSE-SU-2023:0759-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the _is_safe() function in the Perl programming language allows a perpetrator to compromise data integrity.

The vulnerability of the issafe function in the Perl programming language is related to the incorrect definition of symbolic references before accessing a file. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

[SECURITY] [DLA 3367-1] libdatetime-timezone-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3367-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 24, 2023 https://wiki.debian.org/LTS -...

DLA-3367-1 libdatetime-timezone-perl - new timezone database

Bulletin has no description...

Debian dla-3367 : libdatetime-timezone-perl - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3367 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3367-1 [email protected] https://www.debian.org/lts/security/...