Stay Secure with the Latest Linux Advisories

security advisorycriticalubuntu

Ubuntu 23.04 USN-6112-2 Critical: Perl Install Modules Issue

Perl could be made to install modules from untrusted sources.. =========================================================================Ubuntu Security Notice USN-6112-2 June 05, 2023 perl vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Perl could be made to install modules from untrusted sources. Software Description: - perl: Practical Extraction and Report Language Details: USN-6112-1 fixed vulnerabilities in Perl. This update provides the corresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. Original advisory details: It was discovered that Perl was not properly verifying TLS certificates when using CPAN together with HTTP::Tiny to download modules over HTTPS. If a remote attacker were able to intercept communications, this flaw could potentially be used to install altered modules. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: perl 5.36.0-7ubuntu0.23.04.1 Ubuntu 22.10: perl 5.34.0-5ubuntu1.2 Ubuntu 22.04 LTS: perl 5.34.0-3ubuntu1.2 Ubuntu 20.04 LTS: perl 5.30.0-9ubuntu0.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6112-2 https://ubuntu.com/security/notices/USN-6112-1 CVE-2023-31484 Package Information: https://launchpad.net/ubuntu/+source/perl/5.36.0-7ubuntu0.23.04.1 https://launchpad.net/ubuntu/+source/perl/5.34.0-5ubuntu1.2 https://launchpad.net/ubuntu/+source/perl/5.34.0-3ubuntu1.2 https://launchpad.net/ubuntu/+source/perl/5.30.0-9ubuntu0.4 . Ubuntu Security Notice USN-6113-1 addresses a significant Python vulnerability influencing various versions. Explore for further information.. Perl Security Update, Ubuntu Security Patch, TLS Verification Issue. . Severity: Critical. LinuxSecurity.com Team

Jun 05, 2023 •Critical Ubuntu