Debian/liblwp-protocol-https-perl: medium 5.9
The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the (1) HTTPS_
Action: Upgrade liblwp-protocol-https-perl to 6.04-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.04-3 | - |
Fixed versions
| 6.04-3 |
Sources
published · modified · JSON