This update for perl-HTTP-Tiny fixes the following issues:
perl-HTTP-Tiny was updated to 0.086:
see /usr/share/doc/packages/perl-HTTP-Tiny/Changes
0.086 2023-06-22 10:06:37-04:00 America/New_York
- Fix code to use `$ENV{PERL_HTTP_TINY_SSL_INSECURE_BY_DEFAULT}` as
documented.
0.084 2023-06-14 06:35:01-04:00 America/New_York
- No changes from 0.083-TRIAL.
0.083 2023-06-11 07:05:45-04:00 America/New_York (TRIAL RELEASE)
[!!! SECURITY !!!]
- Changes the `verify_SSL` default parameter from `0` to `1`. Fixes
CVE-2023-31486 (boo#1211002)
- `$ENV{PERL_HTTP_TINY_SSL_INSECURE_BY_DEFAULT}` can be used to
restore the
old default if required.
0.081 2022-07-17 09:01:51-04:00 America/New_York (TRIAL RELEASE)
[FIXED]
- No longer deletes the 'headers' key from post_form arguments
hashref. [DOCS]
- Noted that request/response content are handled as raw...
Read the Full AdvisoryPatch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP4:
zypper in -t patch openSUSE-2023-222=1
- openSUSE Backports SLE-15-SP4 (noarch):
perl-HTTP-Tiny-0.086-bp154.2.3.1
https://www.suse.com/security/cve/CVE-2023-31486.html
https://bugzilla.suse.com/1211002
Get the latest Linux and open source security news straight to your inbox.