USN-6112-1: Perl vulnerability
29 May 2023
Perl could be made to install modules from untrusted sources.
- perl - Practical Extraction and Report Language
It was discovered that Perl was not properly verifying TLS certificates
when using CPAN together with HTTP::Tiny to download modules over HTTPS.
If a remote attacker were able to intercept communications, this flaw
could potentially be used to install altered modules.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.
- USN-6112-2: libperl5.34, perl-modules-5.30, libperl5.36, perl, perl-modules-5.34, libperl-dev, libperl5.30, perl-base, perl-modules-5.36, perl-doc, perl-debug