mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-07-16 03:47:03 +00:00
Code Issues Projects Releases Wiki Activity
Files
mickledore
poky/meta/recipes-devtools/perl
T
History
Soumya 68b407ff94 perl: Fix CVE-2023-31484 & CVE-2023-31486 
CPAN.pm before 2.35 does not verify TLS certificates when downloading
distributions over HTTPS.

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and
available standalone on CPAN, has an insecure default TLS
configuration where users must opt in to verify certificates.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-31484
https://nvd.nist.gov/vuln/detail/CVE-2023-31486

Upstream patches:
https://github.com/andk/cpanpm/commit/9c98370287f4e709924aee7c58ef21c85289a7f0
https://github.com/chansen/p5-http-tiny/commit/77f557ef84698efeb6eed04e4a9704eaf85b741d
https://github.com/chansen/p5-http-tiny/commit/a22785783b17cbaa28afaee4a024d81a1903701d

(From OE-Core rev: f4fe9861d6aebd971a3120a0eb43f752c73ce2fb)

Signed-off-by: Soumya <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-07-07 04:30:25 -10:00
..
files
perl: Fix CVE-2023-31484 & CVE-2023-31486
2023-07-07 04:30:25 -10:00
libmodule-build-perl
…
liburi-perl
liburi-perl: upgrade 5.08 -> 5.17
2022-11-22 12:26:45 +00:00
liberror-perl_0.17029.bb
abi_version/sstate: Handle pkgconfig output changes and bump output versions
2023-03-26 18:50:17 +01:00
libmodule-build-perl_0.4234.bb
libmodule-build-perl: upgrade 0.4232 -> 0.4234
2023-05-31 04:08:11 -10:00
libtest-fatal-perl_0.017.bb
libtest-fatal-perl: upgrade 0.016 -> 0.017
2023-01-06 12:03:47 +00:00
libtest-needs-perl_0.002010.bb
libtest-needs-perl: upgrade 0.002009 -> 0.002010
2023-02-04 17:02:09 +00:00
libtest-warnings-perl_0.031.bb
libtest-warnings-perl: move from meta-perl
2022-11-22 12:26:45 +00:00
libtry-tiny-perl_0.31.bb
libtry-tiny-perl: add recipe for 0.31
2022-11-22 12:26:45 +00:00
liburi-perl_5.17.bb
liburi-perl: upgrade 5.08 -> 5.17
2022-11-22 12:26:45 +00:00
libxml-parser-perl_2.46.bb
…
libxml-perl_0.08.bb
libxml-perl: Add missing perl module ptest dependencies
2023-03-12 23:39:13 +00:00
libxml-simple-perl_2.25.bb
…
perl_5.36.0.bb
perl: Fix CVE-2023-31484 & CVE-2023-31486
2023-07-07 04:30:25 -10:00
perl-ptest.inc
perl: Add missing procps-ps dependency for ptests
2023-03-12 23:39:13 +00:00