Description
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libhttp-tiny-perl | 0.088-1 | — |
| Debian 14 | perl | 5.38.2-2 | — |
| Debian 13 | libhttp-tiny-perl | 0.088-1 | — |
| Debian 13 | perl | 5.38.2-2 | — |
| Debian 12 | perl +1 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | perl +1 | No fix yet | — |
| Ubuntu 20.04 LTS | libhttp-tiny-perl | No fix yet | — |
| Ubuntu 18.04 LTS | libhttp-tiny-perl | No fix yet | — |
| Ubuntu 16.04 LTS | libhttp-tiny-perl | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | perl | No fix yet | — |
| Ubuntu Pro 18.04 LTS | perl | No fix yet | — |
| Ubuntu Pro 16.04 LTS | perl | No fix yet | — |
| Ubuntu Pro 14.04 LTS | perl | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | perl-HTTP-Tiny | 0.076-461.el9 | RHSA-2023:6542 |
| RHEL 8 | perl-HTTP-Tiny | 0.074-2.el8 | RHSA-2023:7174 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | perl-HTTP-Tiny | 0.076-461.el9_2 | RHSA-2024:4430 |
| RHEL 8.8 EUS | perl-HTTP-Tiny | 0.074-1.el8_8.2 | RHSA-2024:0579 |
| RHEL 8.6 EUS | perl-HTTP-Tiny | 0.074-1.el8_6.1 | RHSA-2024:0422 |
| Red Hat Hardened Images 1 | perl +10 | 5.42.2-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-AutoSplit +1 | 5.74-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-B | 1.89-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Benchmark +1 | 1.27-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Class-Struct | 0.68-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-DBM_Filter | 0.07-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Devel-Peek | 1.36-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Devel-SelfStubber | 1.06-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-DynaLoader | 1.57-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-English +1 | 1.11-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Errno | 1.38-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-ExtUtils-Constant | 0.25-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Fcntl +1 | 1.20-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-File-Basename | 2.86-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-File-Compare | 1.100.800-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-File-Copy | 2.41-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-File-DosGlob | 1.12-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-File-Find | 1.44-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-File-stat +3 | 1.14-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-FileHandle | 2.05-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-FindBin | 1.54-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-GDBM_File +1 | 1.24-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Hash-Util | 0.32-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-I18N-LangTags | 0.45-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-I18N-Langinfo | 0.24-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-IO | 1.55-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Locale-Maketext-Simple | 0.21-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Math-Complex | 1.63-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Memoize +1 | 1.17-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Module-Loaded | 0.08-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-NDBM_File | 1.18-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-NEXT | 0.69-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Net +3 | 1.04-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Opcode | 1.69-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-POSIX | 2.23-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Pod-Html +1 | 1.35-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Safe | 2.47-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Search-Dict | 1.08-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-SelectSaver +2 | 1.02-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-SelfLoader | 1.28-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Symbol | 1.09-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Sys-Hostname | 1.25-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Term-Complete | 1.403-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Test | 1.31-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Thread | 3.06-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Thread-Semaphore | 2.13-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Tie | 4.6-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Tie-Memoize | 1.1-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Time-Piece | 1.3600-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-Unicode-UCD | 0.81-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-base +2 | 2.27-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-blib | 1.07-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-debugger | 1.60-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-deprecate | 0.04-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-encoding-warnings | 0.14-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-filetest +1 | 1.03-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-if | 0.61.000-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-less +1 | 0.03-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-lib | 0.65-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-mro | 1.29-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-open +1 | 1.13-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-overload +1 | 1.40-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-overloading | 0.02-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-sigtrap +2 | 1.10-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-sort | 2.06-524.1.hum1 | RHSA-2026:7604 |
| Red Hat Hardened Images 1 | perl-vars +2 | 1.05-524.1.hum1 | RHSA-2026:7604 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | perl-HTTP-Tiny | 0.076-461.el9 | ALSA-2023:6542 |
| AlmaLinux 8 | perl-HTTP-Tiny | 0.074-2.el8 | ALSA-2023:7174 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP5 | perl-HTTP-Tiny | 0.086-bp155.3.3.1 | openSUSE-SU-2023:0223-1 |
| SUSE Package Hub 15 SP4 | perl-HTTP-Tiny | 0.086-bp154.2.3.1 | openSUSE-SU-2023:0222-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | perl-HTTP-Tiny | 0.086-1.1 | openSUSE-SU-2024:13034-1 |
| openSUSE Leap 15.5 | perl-HTTP-Tiny | 0.086-bp155.3.3.1 | openSUSE-SU-2023:0223-1 |
| openSUSE Leap 15.4 | perl-HTTP-Tiny | 0.086-bp154.2.3.1 | openSUSE-SU-2023:0222-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | perl +6 | 4:5.32.1-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Attribute-Handlers | 1.01-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-AutoSplit +1 | 5.74-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-B | 1.80-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Class-Struct | 0.66-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-DBM_Filter | 0.06-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Devel-Peek | 1.28-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-DynaLoader | 1.47-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-English +1 | 1.11-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Errno | 1.30-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-ExtUtils-Constant | 0.25-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-ExtUtils-Embed | 1.35-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Fcntl +1 | 1.13-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-File-Basename | 2.85-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-File-Compare | 1.100.600-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-File-Copy | 2.34-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-File-Find +1 | 1.37-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-FileCache | 1.10-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-FileHandle | 2.03-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-FindBin | 1.51-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-GDBM_File | 1.18-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-HTTP-Tiny +1 | 0.078-1.amzn2023.0.3 | ALAS2023-2023-216 |
| Amazon Linux 2023 | perl-Hash-Util | 0.23-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Hash-Util-FieldHash | 1.20-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-I18N-LangTags | 0.44-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-I18N-Langinfo | 0.19-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-IO | 1.43-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-IPC-Open3 | 1.21-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Locale-Maketext-Simple | 1:0.21-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Math-Complex | 1.59-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Module-Loaded | 1:0.08-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-NDBM_File | 1.15-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-NEXT | 0.67-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Net +3 | 1.02-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-ODBM_File | 1.16-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Opcode | 1.48-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-POSIX | 1.94-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Pod-Html | 1.25-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Pod-Perldoc | 3.28.01-459.amzn2023.0.3 | ALAS2023-2023-217 |
| Amazon Linux 2023 | perl-Safe | 2.41-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-SelfLoader | 1.26-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Symbol | 1.08-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Term-Complete | 1.403-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Term-ReadLine | 1.17-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Test +1 | 1.31-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Thread | 3.05-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Thread-Semaphore | 2.13-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Tie | 4.6-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Tie-File +1 | 1.06-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Tie-Memoize | 1.1-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Time +4 | 1.03-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Time-Piece | 1.3401-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-Unicode-UCD | 0.75-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-base +2 | 2.27-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-blib +1 | 1.07-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-debugger | 1.56-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-deprecate | 0.04-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-encoding-warnings | 0.13-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-if | 0.60.800-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-less +1 | 0.03-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-lib | 0.65-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-locale +3 | 1.09-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-mro +2 | 1.23-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-open +2 | 1.12-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-overloading | 0.02-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-ph +3 | 5.32.1-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-sort | 2.04-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-vars +1 | 1.05-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2023 | perl-vmsish | 1.04-477.amzn2023.0.5 | ALAS2023-2023-218 |
| Amazon Linux 2 | perl-HTTP-Tiny | 0.033-3.amzn2.0.1 | ALAS2-2023-2093 |
| Amazon Linux 2 | perl-Pod-Perldoc | 3.20-4.amzn2.0.1 | ALAS2-2023-2094 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | perl | 5.34.1-489 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | perl-HTTP-Tiny | 0.076-461.el9 | ELSA-2023-6542 |
| Oracle Linux 8 | perl-HTTP-Tiny | 0.074-2.el8 | ELSA-2023-7174 |
Advisories 21
- WID-SEC-2023-2853 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- ALSA-2023:6542 Moderate: perl-HTTP-Tiny security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7174 Moderate: perl-HTTP-Tiny security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:7604 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:4430 Red Hat Security Advisory: perl-HTTP-Tiny security update Red Hat Security Advisories (RHSA) · Jul 19, 2026
- RHSA-2024:0579 Red Hat Security Advisory: perl-HTTP-Tiny security update Red Hat Security Advisories (RHSA) · Jul 19, 2026
- RHSA-2024:0422 Red Hat Security Advisory: perl-HTTP-Tiny security update Red Hat Security Advisories (RHSA) · Jul 19, 2026
- RHSA-2023:7174 Red Hat Security Advisory: perl-HTTP-Tiny security update Red Hat Security Advisories (RHSA) · Jul 19, 2026
- RHSA-2023:6542 Red Hat Security Advisory: perl-HTTP-Tiny security update Red Hat Security Advisories (RHSA) · Jul 19, 2026
- WID-SEC-2023-2917 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 30, 2026
- openSUSE-SU-2023:0223-1 Security update for perl-HTTP-Tiny SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13034-1 perl-HTTP-Tiny-0.086-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2023:0222-1 Security update for perl-HTTP-Tiny SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2024-0106 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 16, 2024
- ELSA-2023-7174 Moderate: perl-HTTP-Tiny security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 17, 2023
- ELSA-2023-6542 Moderate: perl-HTTP-Tiny security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 11, 2023
- ALAS2-2023-2093 Important: perl-HTTP-Tiny security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 29, 2023
- ALAS2-2023-2094 Important: perl-Pod-Perldoc security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 29, 2023
- ALAS2023-2023-217 Important: perl-Pod-Perldoc security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 27, 2023
- ALAS2023-2023-218 Important: perl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 27, 2023
- ALAS2023-2023-216 Important: perl-HTTP-Tiny security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 27, 2023
References
- https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
- https://www.openwall.com/lists/oss-security/2023/04/18/14
- https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/
- https://hackeriet.github.io/cpan-http-tiny-overview/
- [oss-security] 20230429 Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules mailing-list
- [oss-security] 20230503 Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules mailing-list
- [oss-security] 20230503 Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules mailing-list
- https://www.openwall.com/lists/oss-security/2023/05/03/4
- [oss-security] 20230507 Re: Perl's HTTP::Tiny has insecure TLS cert default, affecting CPAN.pm and other modules mailing-list
- https://github.com/chansen/p5-http-tiny/pull/153