USN-6112-2: Perl vulnerability

Releases

• Ubuntu 23.04
• Ubuntu 22.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• perl - Practical Extraction and Report Language

Details

USN-6112-1 fixed vulnerabilities in Perl. This update provides the
corresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu
22.10, and Ubuntu 23.04.

Original advisory details:

It was discovered that Perl was not properly verifying TLS certificates
when using CPAN together with HTTP::Tiny to download modules over HTTPS.
If a remote attacker were able to intercept communications, this flaw
could potentially be used to install altered modules.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.04

• perl - 5.36.0-7ubuntu0.23.04.1

Ubuntu 22.10

• perl - 5.34.0-5ubuntu1.2

Ubuntu 22.04

• perl - 5.34.0-3ubuntu1.2

Ubuntu 20.04

• perl - 5.30.0-9ubuntu0.4

In general, a standard system update will make all the necessary changes.

References

• CVE-2023-31484

Related notices

• USN-6112-1: perl-debug, libperl-dev, perl-base, perl-doc, perl-modules-5.22, libperl5.18, libperl5.22, perl-modules, perl, perl-modules-5.26, libperl5.26, libcgi-fast-perl