Skip to content

Commit

Permalink
Add a fix for CPAN module for CVE-2023-31484:
Browse files Browse the repository at this point in the history 
Add verify_SSL=>1 to HTTP::Tiny to verify https server identity

Obtained from: CPAN
  • Loading branch information
@laffer1
laffer1 committed Dec 10, 2023
1 parent 24c2384 commit b6834fa
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions contrib/perl/cpan/CPAN/lib/CPAN/HTTP/Client.pm
View file
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,7 @@ sub mirror {

my $want_proxy = $self->_want_proxy($uri);
my $http = HTTP::Tiny->new(
verify_SSL => 1,
$want_proxy ? (proxy => $self->{proxy}) : ()
);

Expand Down

0 comments on commit b6834fa

Please sign in to comment.