Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

openSUSE Backports SLE-15-SP4: 2023:0222-1 Moderate perl-HTTP-Tiny Advisory

opensuse
Calendar Grey August 15, 2023
Dist Opensuse Esm H88
An upgrade for perl-HTTP-Tiny is now available, resolving a security concern categorized as moderate severity. Specifics of the fix are provided.
An update that fixes one vulnerability is now available

Description

This update for perl-HTTP-Tiny fixes the following issues:

perl-HTTP-Tiny was updated to 0.086:

see /usr/share/doc/packages/perl-HTTP-Tiny/Changes

0.086 2023-06-22 10:06:37-04:00 America/New_York

- Fix code to use `$ENV{PERL_HTTP_TINY_SSL_INSECURE_BY_DEFAULT}` as

documented.

0.084 2023-06-14 06:35:01-04:00 America/New_York

- No changes from 0.083-TRIAL.

0.083 2023-06-11 07:05:45-04:00 America/New_York (TRIAL RELEASE)

[!!! SECURITY !!!]

- Changes the `verify_SSL` default parameter from `0` to `1`. Fixes

CVE-2023-31486 (boo#1211002)

- `$ENV{PERL_HTTP_TINY_SSL_INSECURE_BY_DEFAULT}` can be used to

restore the

old default if required.

0.081 2022-07-17 09:01:51-04:00 America/New_York (TRIAL RELEASE)

[FIXED]

- No longer deletes the 'headers' key from post_form arguments

hashref. [DOCS]

- Noted that request/response content are handled as raw...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP4:

zypper in -t patch openSUSE-2023-222=1

Package List

- openSUSE Backports SLE-15-SP4 (noarch):

perl-HTTP-Tiny-0.086-bp154.2.3.1

References

https://www.suse.com/security/cve/CVE-2023-31486.html

https://bugzilla.suse.com/1211002

Announcement ID: openSUSE-SU-2023:0222-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP4 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here