CVE-2023-31484
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
Original description
The description as published by the source.
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-31484 perl Fixed in: 5.32.1-4+deb11u4
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- patch github.com
- web lists.debian.org
- web metacpan.org
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web openwall.com
- web blog.hackeriet.no