perl-HTTP-Tiny-0.076-461.el9

エラータID: AXSA:2023-6649:01

Release date: 
Thursday, December 7, 2023 - 08:17
Subject: 
perl-HTTP-Tiny-0.076-461.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

HTTP::Tiny is a small and simple HTTP/1.1 client written in Perl.

Security Fix(es):

* http-tiny: insecure TLS cert default (CVE-2023-31486)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-31486
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

Solution: 

Update packages.

CVEs: 
CVE-2023-31486
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
Additional Info: 

N/A

Download: 

SRPMS
  1. perl-HTTP-Tiny-0.076-461.el9.src.rpm
    MD5: 1f725b36e1c1297a762107fdfaf63fdd
    SHA-256: 4592e5998a8a965147ac5ff61a528a862a534bb9143f3fea99f4b554ea19f0f7
    Size: 88.42 kB

Asianux Server 9 for x86_64
  1. perl-HTTP-Tiny-0.076-461.el9.noarch.rpm
    MD5: 6d8f2fe60f09b9a780bc1ae84e044dd0
    SHA-256: 28db9d8c136e29defa514f045f26aa3a41bcfa01eb21c878126b31f87571f49f
    Size: 53.17 kB