Advisory ROSA-SA-2024-2471

software: perl 5.30.3
OS: ROSA-CHROME

package_evr_string: perl-5.30.3-22

CVE-ID: CVE-2021-36770
BDU-ID: 2021-05374
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the Encode.pm module of the Perl programming language interpreter is related to incorrect search path handling. Exploitation of the vulnerability allows an attacker acting remotely to inject arbitrary code and escalate their privileges
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update perl

CVE-ID: CVE-2023-31486
BDU-ID: 2023-03872
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the Perl HTTP::Tiny programming language library is related to errors in the TLS certificate authentication procedure. Exploitation of the vulnerability allows an attacker acting remotely to gain access to sensitive data, compromise its integrity, and cause denial of service
CVE-STATUS: Fixed
CVE-REV: To close, execute command: sudo dnf update perl