USN-6112-1: Perl vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Perl was not properly verifying TLS certificates when using CPAN together with HTTP::Tiny to download modules over HTTPS. If a remote attacker were able to...

CLSA-2023-1686859226 perl: Fix of CVE-2023-31484

CVE-2023-31484: fix possible MITM attach due to missing SSL verification...

CLSA-2023-1686858536 perl: Fix of CVE-2023-31484

CVE-2023-31484: fix possible MITM attach due to missing SSL verification...

CLSA-2023-1686586380 Fix CVE(s): CVE-2023-31484

SECURITY UPDATE: possible MITM attack - debian/patches/fixes/CVE-2023-31484.patch: fix missing SSL verification - CVE-2023-31484...

Amazon Linux 2023 : perl-CPAN, perl-CPAN-tests (ALAS2023-2023-182)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-182 advisory. HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2023-31484 Tenable has...

Important: perl-CPAN

Issue Overview: HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2023-31484 Affected Packages: perl-CPAN Issue Correction: Run dnf update perl-CPAN --releasever...

Important: perl

Issue Overview: HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2023-31484 Affected Packages: perl Issue Correction: Run yum update perl or yum update --advisory...

Amazon Linux AMI : perl (ALAS-2023-1751)

The version of perl installed on the remote host is prior to 5.16.3-294.44. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1751 advisory. HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration whe...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Perl vulnerability (USN-6112-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6112-2 advisory. USN-6112-1 fixed vulnerabilities in Perl. This update provides the corresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 22.10,...

Ubuntu 16.04 ESM / 18.04 LTS : Perl vulnerability (USN-6112-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6112-1 advisory. It was discovered that Perl was not properly verifying TLS certificates when using CPAN together with HTTP::Tiny to download modules over HTTPS. If a...

Important: perl

Issue Overview: HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2023-31484 Affected Packages: perl Issue Correction: Run dnf update perl --releasever 2023.0.20230517 o...

Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2023-178)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-178 advisory. HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2023-31484 Tenable has...

OESA-2023-1287 perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: CPAN.pm before 2.35 does not verify TLS...

CVE-2023-31484

CVE-2023-31484 affects CPAN.pm (and CPAN::HTTP::Client) prior to version 2.35, where TLS certificates were not verified when downloading distributions over HTTPS, enabling potential MITM. Public advisories across Debian, AlmaLinux, Amazon Linux, and Cloud Foundry confirm this issue and its fix: C...

CVE-2023-31484

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS...

CVE-2023-31484 affecting package perl for versions less than 5.34.1-489

CVE-2023-31484 affecting package perl for versions less than 5.34.1-489. A patched version of the package is available...

CVE-2022-31484

creationtimestamp| type| source ---|---|--- 2022-06-07 08:16:50+00:00| seen| https://t.me/cibsecurity/43855 2022-06-10 14:20:06+00:00| seen| https://t.me/truesecator/3049...

CVE-2022-31484

CVE-2022-31484 corresponds to an unauthenticated vulnerability in HID Mercury-based panels (notably the LenelS2 LNL-4420 family) that allows an attacker to perform unauthenticated user modification. The Trellix disclosures consolidate this under the broader set of HID Mercury issues and note it a...

CVE-2021-31484

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...