[USN-6112-1] Perl vulnerability
Camila Camargo de Matos
camila.camargodematos at canonical.com
Mon May 29 18:38:30 UTC 2023
Ubuntu Security Notice USN-6112-1
May 29, 2023
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)
- Ubuntu 14.04 LTS (Available with Ubuntu Pro)
Perl could be made to install modules from untrusted sources.
- perl: Practical Extraction and Report Language
It was discovered that Perl was not properly verifying TLS certificates
when using CPAN together with HTTP::Tiny to download modules over HTTPS.
If a remote attacker were able to intercept communications, this flaw
could potentially be used to install altered modules.
The problem can be corrected by updating your system to the following
Ubuntu 18.04 LTS:
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
Ubuntu 14.04 LTS (Available with Ubuntu Pro):
In general, a standard system update will make all the necessary changes.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 495 bytes
Desc: OpenPGP digital signature
More information about the ubuntu-security-announce