MGASA-2014-0257

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2014-0257.html
Import Source
https://advisories.mageia.org/MGASA-2014-0257.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2014-0257
Upstream
Published
2014-06-06T17:45:49Z
Modified
2026-04-16T06:25:45Z
Summary
Updated perl-LWP-Protocol-https package fixes CVE-2014-3230
Details

Updated perl-LWP-Protocol-https package fixes security vulnerability:

It was reported that libwww-perl (LWP), when using IO::Socket::SSL (the default) and when the HTTPS_CA_DIR or HTTPS_CA_FILE environment variables were set, would disable server certificate verification, when the intent was to only disable hostname verification (CVE-2014-3230).

References
Credits

Affected packages

Mageia:4 / perl-LWP-Protocol-https

Package

Name
perl-LWP-Protocol-https
Purl
pkg:rpm/mageia/perl-LWP-Protocol-https?arch=source&distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.40.0-2.1.mga4

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2014-0257.json"