[Git][security-tracker-team/security-tracker][master] Add CVE-2023-31486/libhttp-tiny-perl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9fd3c340 by Salvatore Bonaccorso at 2023-04-29T08:39:43+02:00
Add CVE-2023-31486/libhttp-tiny-perl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,8 @@
+CVE-2023-31486 [HTTP::Tiny insecure default TLS configuration]
+	- libhttp-tiny-perl <unfixed> (bug #962407; unimportant)
+	NOTE: https://www.openwall.com/lists/oss-security/2023/04/18/14
+	NOTE: https://github.com/chansen/p5-http-tiny/issues/134
+	NOTE: Applications need to explicitly opt in to enable verification.
 CVE-2023-31470 (SmartDNS through 41 before 56d0332 allows an out-of-bounds write becau ...)
 	NOT-FOR-US: SmartDNS
 CVE-2023-31444 (In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09,  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fd3c340a3d6e3141f8599784a18df8b6e39f8c0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fd3c340a3d6e3141f8599784a18df8b6e39f8c0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230429/ccaca588/attachment.htm>