Accepted perl 5.8.7-8ubuntu2 (source)

Martin Pitt martin.pitt at ubuntu.com
Fri Dec 2 11:10:11 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri,  2 Dec 2005 12:04:53 +0100
Source: perl
Binary: perl-base libcgi-fast-perl libperl-dev perl-debug perl-modules perl libperl5.8 perl-suid perl-doc
Architecture: source
Version: 5.8.7-8ubuntu2
Distribution: dapper
Urgency: low
Maintainer: Brendan O'Dea <bod at debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 libcgi-fast-perl - CGI::Fast Perl module
 libperl-dev - Perl library: development files
 libperl5.8 - Shared Perl library
 perl       - Larry Wall's Practical Extraction and Report Language
 perl-base  - The Pathologically Eclectic Rubbish Lister
 perl-debug - Debug-enabled Perl interpreter
 perl-doc   - Perl documentation
 perl-modules - Core Perl modules
 perl-suid  - Runs setuid Perl scripts
Changes: 
 perl (5.8.7-8ubuntu2) dapper; urgency=low
 .
   * SECURITY UPDATE: Arbitrary code execution with unsafe Perl programs.
   * Add and apply debian/patches/99_ubuntu_CVE-2005-3962:
     - Perl_sv_vcatpvfn(): Fix integer overflow of length parameter in format
       strings.
   * References:
     - CVE-2005-3962
     - http://www.dyadsecurity.com/perl-0002.html
     - Ubuntu #20335
   * patches-applied: Add 99_ubuntu_CVE-2005-3962.
Files: 
 446116aeda7c49bd04a0397a6a791e08 731 perl standard perl_5.8.7-8ubuntu2.dsc
 631951dd01934ef8ff6a928274ab6870 137530 perl standard perl_5.8.7-8ubuntu2.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDkCqsDecnbV4Fd/IRAsfjAJoD8vw41qSAzSf3mtYb9E+Tou1TDACfWYiW
5x2Byuln+AbJMS7LnXynLIY=
=80ro
-----END PGP SIGNATURE-----


Accepted:
perl_5.8.7-8ubuntu2.diff.gz
  to pool/main/p/perl/perl_5.8.7-8ubuntu2.diff.gz
perl_5.8.7-8ubuntu2.dsc
  to pool/main/p/perl/perl_5.8.7-8ubuntu2.dsc




More information about the dapper-changes mailing list