Most recent entries from all

ALSA-2023:6539 — Moderate: perl-CPAN security update

Affected: AlmaLinux:9: perl-CPAN

The CPAN module is a tool to query, download and build perl modules from CPAN sites.

Security Fix(es):

* perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS (CVE-2023-31484)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03871

BELL-CVE-2023-31484

Affected: Alpaquita:23: perl, Alpaquita:stream: perl, BellSoft Hardened Containers:23: perl, BellSoft Hardened Containers:stream: perl

certfr-2024-avi-0086 — De multiples vulnérabilités ont été découvertes dans Juniper. Elles permettent à un attaquant de provoquer une exécutio…

certfr-2024-avi-0086

EUVD-2026-258422

fkie_cve-2023-31484

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.

GHSA-5v8j-jfmm-6x86

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.

gsd-2023-31484

msrc_CVE-2023-31484 — CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.

msrc_CVE-2023-31484

OESA-2023-1287 — perl security update

Affected: openEuler:20.03-LTS-SP1: perl, openEuler:20.03-LTS-SP3: perl, openEuler:22.03-LTS: perl, openEuler:22.03-LTS-SP1: perl

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fix(es): CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.(CVE-2023-31484)

RHSA-2023:6539 — Red Hat Security Advisory: perl-CPAN security update

perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

RHSA-2026:7604 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

perl: Directory traversal in Archive::Tar perl: Integer overflow leading to buffer overflow in Perl_my_setenv() perl: Heap-based buffer overflow in S_handle_regex_sets() perl: Heap-based buffer read overflow in S_grok_bslash_N() perl: Heap-based buffer overflow in S_regatom() perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS http-tiny: perl: insecure TLS cert default

SUSE-SU-2023:2881-1 — Security update for perl

Security update for perl

UBUNTU-CVE-2023-31484

Affected: Ubuntu:Pro:14.04:LTS: perl, Ubuntu:Pro:16.04:LTS: perl, Ubuntu:18.04:LTS: perl, Ubuntu:20.04:LTS: perl, Ubuntu:22.04:LTS: perl

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.

WID-SEC-W-2023-1608 — Perl: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein Angreifer kann eine Schwachstelle in Perl ausnutzen, um Sicherheitsvorkehrungen zu umgehen.