Most recent entries from all

ALSA-2023:6542 — Moderate: perl-HTTP-Tiny security update

Affected: AlmaLinux:9: perl-HTTP-Tiny

HTTP::Tiny is a small and simple HTTP/1.1 client written in Perl.

Security Fix(es):

* http-tiny: insecure TLS cert default (CVE-2023-31486)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03872

BELL-CVE-2023-31486

Affected: Alpaquita:23: perl, Alpaquita:stream: perl, BellSoft Hardened Containers:23: perl, BellSoft Hardened Containers:stream: perl

BREW-perl-build-CVE-2023-31486

Affected: Homebrew: perl-build

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

certfr-2024-avi-0419 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre el…

certfr-2024-avi-0419

EUVD-2026-212841

fkie_cve-2023-31486

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

GHSA-g56r-phrf-6pc4

HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

gsd-2023-31486

msrc_CVE-2023-31486 — HTTP::Tiny before 0.083 a Perl core module since 5.13.9 and available standalone on CPAN has an insecure default TLS co…

msrc_CVE-2023-31486

OESA-2023-1389 — perl-HTTP-Tiny security update

Affected: openEuler:20.03-LTS-SP1: perl-HTTP-Tiny, openEuler:20.03-LTS-SP3: perl-HTTP-Tiny, openEuler:22.03-LTS: perl-HTTP-Tiny, openEuler:22.03-LTS-SP1: perl-HTTP-Tiny

A small, simple, correct HTTP/1.1 client. Security Fix(es): HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.(CVE-2023-31486)

openSUSE-SU-2023:0222-1 — Security update for perl-HTTP-Tiny

Security update for perl-HTTP-Tiny

RHSA-2024:0422 — Red Hat Security Advisory: perl-HTTP-Tiny security update

http-tiny: perl: insecure TLS cert default

UBUNTU-CVE-2023-31486

Affected: Ubuntu:Pro:14.04:LTS: perl, Ubuntu:16.04:LTS: libhttp-tiny-perl, Ubuntu:Pro:16.04:LTS: perl, Ubuntu:Pro:18.04:LTS: perl, Ubuntu:18.04:LTS: libhttp-tiny-perl, Ubuntu:Pro:20.04:LTS: perl, Ubuntu:20.04:LTS: libhttp-tiny-perl, Ubuntu:22.04:LTS: libhttp-tiny-perl, Ubuntu:22.04:LTS: perl

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

WID-SEC-W-2023-2853 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.