Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-45321: The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | perl-App-cpanminus | 0:1.6922-2.amzn2.0.1 |
Vulnerabilities 1
-
Critical 9.8
The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for networ…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-45321.html