Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-31486: HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | perl-HTTP-Tiny | 0:0.033-3.amzn2.0.1 |
Vulnerabilities 1
-
High 8.1
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-31486.html