Stay Secure with the Latest Linux Advisories

security advisorysoftware updateUbuntu

Ubuntu 18.04 LTS USN-6112-1 Moderate: Perl Module Install Risk

Perl could be made to install modules from untrusted sources.. =========================================================================Ubuntu Security Notice USN-6112-1 May 29, 2023 perl vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: Perl could be made to install modules from untrusted sources. Software Description: - perl: Practical Extraction and Report Language Details: It was discovered that Perl was not properly verifying TLS certificates when using CPAN together with HTTP::Tiny to download modules over HTTPS. If a remote attacker were able to intercept communications, this flaw could potentially be used to install altered modules. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: perl 5.26.1-6ubuntu0.7 Ubuntu 16.04 LTS (Available with Ubuntu Pro): perl 5.22.1-9ubuntu0.9+esm2 Ubuntu 14.04 LTS (Available with Ubuntu Pro): perl 5.18.2-2ubuntu1.7+esm5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6112-1 CVE-2023-31484 Package Information: https://launchpad.net/ubuntu/+source/perl/5.26.1-6ubuntu0.7 . Ubuntu Security Notice USN-6113-1 addresses a critical flaw in Python that could allow unauthorized remote code execution.. Perl Module Install Risk, Ubuntu Security Advisory, Untrusted Module Source, TLS Certificate Verification. . Severity: Important. LinuxSecurity.com Team

May 29, 2023 •Important Ubuntu