ALAS2023-2023-178

Amazon Linux 2023 Security Advisory: ALAS-2023-178
Advisory Release Date: 2023-05-11 17:49 Pacific
Advisory Updated Date: 2023-05-24 18:57 Pacific
Severity: Important
Issue Overview:

HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. (CVE-2023-31484)


Affected Packages:

perl


Issue Correction:
Run dnf update perl --releasever 2023.0.20230517 to update your system.

New Packages:
aarch64:
    perl-interpreter-5.32.1-477.amzn2023.0.4.aarch64
    perl-Hash-Util-debuginfo-0.23-477.amzn2023.0.4.aarch64
    perl-File-DosGlob-1.12-477.amzn2023.0.4.aarch64
    perl-debugsource-5.32.1-477.amzn2023.0.4.aarch64
    perl-I18N-Langinfo-debuginfo-0.19-477.amzn2023.0.4.aarch64
    perl-Hash-Util-FieldHash-1.20-477.amzn2023.0.4.aarch64
    perl-Hash-Util-0.23-477.amzn2023.0.4.aarch64
    perl-Devel-Peek-1.28-477.amzn2023.0.4.aarch64
    perl-GDBM_File-1.18-477.amzn2023.0.4.aarch64
    perl-Opcode-debuginfo-1.48-477.amzn2023.0.4.aarch64
    perl-Sys-Hostname-1.23-477.amzn2023.0.4.aarch64
    perl-NDBM_File-debuginfo-1.15-477.amzn2023.0.4.aarch64
    perl-B-debuginfo-1.80-477.amzn2023.0.4.aarch64
    perl-IO-1.43-477.amzn2023.0.4.aarch64
    perl-ph-5.32.1-477.amzn2023.0.4.aarch64
    perl-Fcntl-1.13-477.amzn2023.0.4.aarch64
    perl-Opcode-1.48-477.amzn2023.0.4.aarch64
    perl-libs-5.32.1-477.amzn2023.0.4.aarch64
    perl-B-1.80-477.amzn2023.0.4.aarch64
    perl-ODBM_File-debuginfo-1.16-477.amzn2023.0.4.aarch64
    perl-devel-5.32.1-477.amzn2023.0.4.aarch64
    perl-tests-5.32.1-477.amzn2023.0.4.aarch64
    perl-I18N-Langinfo-0.19-477.amzn2023.0.4.aarch64
    perl-Hash-Util-FieldHash-debuginfo-1.20-477.amzn2023.0.4.aarch64
    perl-POSIX-1.94-477.amzn2023.0.4.aarch64
    perl-mro-debuginfo-1.23-477.amzn2023.0.4.aarch64
    perl-GDBM_File-debuginfo-1.18-477.amzn2023.0.4.aarch64
    perl-IO-debuginfo-1.43-477.amzn2023.0.4.aarch64
    perl-ODBM_File-1.16-477.amzn2023.0.4.aarch64
    perl-mro-1.23-477.amzn2023.0.4.aarch64
    perl-Devel-Peek-debuginfo-1.28-477.amzn2023.0.4.aarch64
    perl-libs-debuginfo-5.32.1-477.amzn2023.0.4.aarch64
    perl-debuginfo-5.32.1-477.amzn2023.0.4.aarch64
    perl-Time-Piece-1.3401-477.amzn2023.0.4.aarch64
    perl-Time-Piece-debuginfo-1.3401-477.amzn2023.0.4.aarch64
    perl-POSIX-debuginfo-1.94-477.amzn2023.0.4.aarch64
    perl-NDBM_File-1.15-477.amzn2023.0.4.aarch64
    perl-Fcntl-debuginfo-1.13-477.amzn2023.0.4.aarch64
    perl-File-DosGlob-debuginfo-1.12-477.amzn2023.0.4.aarch64
    perl-Sys-Hostname-debuginfo-1.23-477.amzn2023.0.4.aarch64
    perl-DynaLoader-1.47-477.amzn2023.0.4.aarch64
    perl-interpreter-debuginfo-5.32.1-477.amzn2023.0.4.aarch64
    perl-lib-0.65-477.amzn2023.0.4.aarch64
    perl-Errno-1.30-477.amzn2023.0.4.aarch64
    perl-5.32.1-477.amzn2023.0.4.aarch64

noarch:
    perl-diagnostics-1.37-477.amzn2023.0.4.noarch
    perl-Tie-File-1.06-477.amzn2023.0.4.noarch
    perl-ExtUtils-Constant-0.25-477.amzn2023.0.4.noarch
    perl-utils-5.32.1-477.amzn2023.0.4.noarch
    perl-debugger-1.56-477.amzn2023.0.4.noarch
    perl-doc-5.32.1-477.amzn2023.0.4.noarch
    perl-Math-Complex-1.59-477.amzn2023.0.4.noarch
    perl-Memoize-1.03-477.amzn2023.0.4.noarch
    perl-I18N-LangTags-0.44-477.amzn2023.0.4.noarch
    perl-Unicode-UCD-0.75-477.amzn2023.0.4.noarch
    perl-overload-1.31-477.amzn2023.0.4.noarch
    perl-File-Find-1.37-477.amzn2023.0.4.noarch
    perl-Attribute-Handlers-1.01-477.amzn2023.0.4.noarch
    perl-Tie-4.6-477.amzn2023.0.4.noarch
    perl-Benchmark-1.23-477.amzn2023.0.4.noarch
    perl-Test-1.31-477.amzn2023.0.4.noarch
    perl-DBM_Filter-0.06-477.amzn2023.0.4.noarch
    perl-Pod-Html-1.25-477.amzn2023.0.4.noarch
    perl-Safe-2.41-477.amzn2023.0.4.noarch
    perl-Net-1.02-477.amzn2023.0.4.noarch
    perl-Class-Struct-0.66-477.amzn2023.0.4.noarch
    perl-NEXT-0.67-477.amzn2023.0.4.noarch
    perl-IPC-Open3-1.21-477.amzn2023.0.4.noarch
    perl-SelfLoader-1.26-477.amzn2023.0.4.noarch
    perl-AutoSplit-5.74-477.amzn2023.0.4.noarch
    perl-AutoLoader-5.74-477.amzn2023.0.4.noarch
    perl-Dumpvalue-2.27-477.amzn2023.0.4.noarch
    perl-File-Copy-2.34-477.amzn2023.0.4.noarch
    perl-User-pwent-1.03-477.amzn2023.0.4.noarch
    perl-Term-ReadLine-1.17-477.amzn2023.0.4.noarch
    perl-libnetcfg-5.32.1-477.amzn2023.0.4.noarch
    perl-ExtUtils-Embed-1.35-477.amzn2023.0.4.noarch
    perl-File-Basename-2.85-477.amzn2023.0.4.noarch
    perl-Pod-Functions-1.13-477.amzn2023.0.4.noarch
    perl-Locale-Maketext-Simple-0.21-477.amzn2023.0.4.noarch
    perl-File-stat-1.09-477.amzn2023.0.4.noarch
    perl-base-2.27-477.amzn2023.0.4.noarch
    perl-Thread-3.05-477.amzn2023.0.4.noarch
    perl-fields-2.27-477.amzn2023.0.4.noarch
    perl-Time-1.03-477.amzn2023.0.4.noarch
    perl-open-1.12-477.amzn2023.0.4.noarch
    perl-sigtrap-1.09-477.amzn2023.0.4.noarch
    perl-Getopt-Std-1.12-477.amzn2023.0.4.noarch
    perl-Thread-Semaphore-2.13-477.amzn2023.0.4.noarch
    perl-encoding-warnings-0.13-477.amzn2023.0.4.noarch
    perl-FileHandle-2.03-477.amzn2023.0.4.noarch
    perl-ExtUtils-Miniperl-1.09-477.amzn2023.0.4.noarch
    perl-FileCache-1.10-477.amzn2023.0.4.noarch
    perl-I18N-Collate-1.02-477.amzn2023.0.4.noarch
    perl-Devel-SelfStubber-1.06-477.amzn2023.0.4.noarch
    perl-Symbol-1.08-477.amzn2023.0.4.noarch
    perl-vmsish-1.04-477.amzn2023.0.4.noarch
    perl-deprecate-0.04-477.amzn2023.0.4.noarch
    perl-locale-1.09-477.amzn2023.0.4.noarch
    perl-filetest-1.03-477.amzn2023.0.4.noarch
    perl-FindBin-1.51-477.amzn2023.0.4.noarch
    perl-Tie-Memoize-1.1-477.amzn2023.0.4.noarch
    perl-overloading-0.02-477.amzn2023.0.4.noarch
    perl-English-1.11-477.amzn2023.0.4.noarch
    perl-autouse-1.11-477.amzn2023.0.4.noarch
    perl-macros-5.32.1-477.amzn2023.0.4.noarch
    perl-Term-Complete-1.403-477.amzn2023.0.4.noarch
    perl-sort-2.04-477.amzn2023.0.4.noarch
    perl-if-0.60.800-477.amzn2023.0.4.noarch
    perl-vars-1.05-477.amzn2023.0.4.noarch
    perl-File-Compare-1.100.600-477.amzn2023.0.4.noarch
    perl-Module-Loaded-0.08-477.amzn2023.0.4.noarch
    perl-less-0.03-477.amzn2023.0.4.noarch
    perl-Search-Dict-1.07-477.amzn2023.0.4.noarch
    perl-DirHandle-1.05-477.amzn2023.0.4.noarch
    perl-blib-1.07-477.amzn2023.0.4.noarch
    perl-Text-Abbrev-1.02-477.amzn2023.0.4.noarch
    perl-Config-Extensions-0.03-477.amzn2023.0.4.noarch
    perl-SelectSaver-1.02-477.amzn2023.0.4.noarch
    perl-subs-1.03-477.amzn2023.0.4.noarch
    perl-meta-notation-5.32.1-477.amzn2023.0.4.noarch

src:
    perl-5.32.1-477.amzn2023.0.4.src

x86_64:
    perl-libs-debuginfo-5.32.1-477.amzn2023.0.4.x86_64
    perl-debugsource-5.32.1-477.amzn2023.0.4.x86_64
    perl-Devel-Peek-debuginfo-1.28-477.amzn2023.0.4.x86_64
    perl-debuginfo-5.32.1-477.amzn2023.0.4.x86_64
    perl-mro-debuginfo-1.23-477.amzn2023.0.4.x86_64
    perl-POSIX-debuginfo-1.94-477.amzn2023.0.4.x86_64
    perl-B-1.80-477.amzn2023.0.4.x86_64
    perl-ODBM_File-debuginfo-1.16-477.amzn2023.0.4.x86_64
    perl-Time-Piece-debuginfo-1.3401-477.amzn2023.0.4.x86_64
    perl-interpreter-5.32.1-477.amzn2023.0.4.x86_64
    perl-B-debuginfo-1.80-477.amzn2023.0.4.x86_64
    perl-ph-5.32.1-477.amzn2023.0.4.x86_64
    perl-NDBM_File-debuginfo-1.15-477.amzn2023.0.4.x86_64
    perl-Hash-Util-FieldHash-1.20-477.amzn2023.0.4.x86_64
    perl-Hash-Util-debuginfo-0.23-477.amzn2023.0.4.x86_64
    perl-Hash-Util-FieldHash-debuginfo-1.20-477.amzn2023.0.4.x86_64
    perl-IO-debuginfo-1.43-477.amzn2023.0.4.x86_64
    perl-Time-Piece-1.3401-477.amzn2023.0.4.x86_64
    perl-Opcode-debuginfo-1.48-477.amzn2023.0.4.x86_64
    perl-devel-5.32.1-477.amzn2023.0.4.x86_64
    perl-IO-1.43-477.amzn2023.0.4.x86_64
    perl-POSIX-1.94-477.amzn2023.0.4.x86_64
    perl-tests-5.32.1-477.amzn2023.0.4.x86_64
    perl-GDBM_File-debuginfo-1.18-477.amzn2023.0.4.x86_64
    perl-libs-5.32.1-477.amzn2023.0.4.x86_64
    perl-Hash-Util-0.23-477.amzn2023.0.4.x86_64
    perl-Opcode-1.48-477.amzn2023.0.4.x86_64
    perl-I18N-Langinfo-debuginfo-0.19-477.amzn2023.0.4.x86_64
    perl-Devel-Peek-1.28-477.amzn2023.0.4.x86_64
    perl-Fcntl-debuginfo-1.13-477.amzn2023.0.4.x86_64
    perl-File-DosGlob-debuginfo-1.12-477.amzn2023.0.4.x86_64
    perl-mro-1.23-477.amzn2023.0.4.x86_64
    perl-Sys-Hostname-debuginfo-1.23-477.amzn2023.0.4.x86_64
    perl-DynaLoader-1.47-477.amzn2023.0.4.x86_64
    perl-ODBM_File-1.16-477.amzn2023.0.4.x86_64
    perl-GDBM_File-1.18-477.amzn2023.0.4.x86_64
    perl-I18N-Langinfo-0.19-477.amzn2023.0.4.x86_64
    perl-Fcntl-1.13-477.amzn2023.0.4.x86_64
    perl-NDBM_File-1.15-477.amzn2023.0.4.x86_64
    perl-interpreter-debuginfo-5.32.1-477.amzn2023.0.4.x86_64
    perl-File-DosGlob-1.12-477.amzn2023.0.4.x86_64
    perl-Sys-Hostname-1.23-477.amzn2023.0.4.x86_64
    perl-Errno-1.30-477.amzn2023.0.4.x86_64
    perl-lib-0.65-477.amzn2023.0.4.x86_64
    perl-5.32.1-477.amzn2023.0.4.x86_64

Additional References

Red Hat: CVE-2023-31484

Mitre: CVE-2023-31484