Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-31486: HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | perl-HTTP-Tiny | 0:0.078-1.amzn2023.0.3 |
| Amazon Linux · 2023 | perl-HTTP-Tiny-tests | 0:0.078-1.amzn2023.0.3 |
Vulnerabilities 1
-
High 8.1
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-31486.html