[Security]: PERL vulnerabilities fixes are not avaialble

[phanikumar1210]

Product

Amazon Linux 2023

What is your question?

Latest image of Amazon Linux docker image still uses perl version that has security vulnerabilities

CVE-2023-31486
CVE-2023-31484
CVE-2023-47100
CVE-2023-47038

Please do add support to run latest version of perl(5.40.0)

[sktomer]

Please refer to the linked ALAS pages for more details.
These have already been addressed for AL2023.

• CVE-2023-31486

  • ALAS-2023-216
  • ALAS-2023-217
  • ALAS-2023-218

• CVE-2023-31484

  • ALAS-2023-178
  • ALAS-2023-182

• CVE-2023-47100

• CVE-2023-47038

  • ALAS-2023-448