perl 5.14.2-6ubuntu2.5 source package in Ubuntu


perl (5.14.2-6ubuntu2.5) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service via regular expression invalid
    - debian/patches/CVE-2013-7422.patch: properly handle big
      backreferences in regcomp.c.
    - CVE-2013-7422
  * SECURITY UPDATE: denial of service in Data::Dumper
    - debian/patches/CVE-2014-4330.patch: limit recursion in MANIFEST,
      dist/Data-Dumper/, dist/Data-Dumper/Dumper.xs,
    - CVE-2014-4330
  * SECURITY UPDATE: environment variable confusion issue
    - debian/patches/CVE-2016-2381.patch: remove duplicate environment
      variables from environ in perl.c.
    - CVE-2016-2381

 -- Marc Deslauriers <email address hidden>  Tue, 01 Mar 2016 11:02:10 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2016-03-01
Uploaded to:
Original maintainer:
Ubuntu Developers
any all
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates on 2016-03-02 main perl
Precise security on 2016-03-02 main perl


File Size SHA-256 Checksum
perl_5.14.2.orig.tar.bz2 12.6 MiB c2a2362e8d1fdd2bfbfde801fcd78241f154c164f00fba76065ab8cc5c7b06cd
perl_5.14.2-6ubuntu2.5.debian.tar.gz 135.3 KiB 68ed81ddd2eee132e531889f5ab4a820dd3cccb8938b00e975b41e7b124d00eb
perl_5.14.2-6ubuntu2.5.dsc 2.4 KiB 1bafa75c14b5d8b76ae610d52c71c17f78bc99467a84085161dc6dfd61fbc961

View changes file

Binary packages built by this source

libcgi-fast-perl: CGI::Fast Perl module

 CGI::Fast is a subclass of the CGI object created by It is
 specialized to work well with the Open Market FastCGI standard, which
 greatly speeds up CGI scripts by turning them into persistently running
 server processes. Scripts that perform time-consuming initialization
 processes, such as loading large modules or opening persistent database
 connections, will see large performance improvements.

libperl-dev: Perl library: development files

 Files for developing applications which embed a Perl interpreter.

libperl5.14: shared Perl library

 This package is required by programs which embed a Perl interpreter to
 ensure that the correct version of `perl-base' is installed. It
 additionally contains the shared Perl library on architectures where the
 perl binary is linked to libperl.a (currently only i386, for performance
 reasons). In other cases the actual library is in the `perl-base' package.

perl: Larry Wall's Practical Extraction and Report Language

 An interpreted scripting language, known among some as "Unix's Swiss
 Army Chainsaw".
 Perl is optimised for scanning arbitrary text files and system
 administration. It has built-in extended regular expression matching
 and replacement, a data-flow mechanism to improve security with
 setuid scripts and is extensible via modules that can interface to C

perl-base: minimal Perl system

 Perl is a scripting language used in many system scripts and utilities.
 This package provides a Perl interpreter and the small subset of the
 standard run-time library required to perform basic tasks. For a full
 Perl installation, install "perl" (and its dependencies, "perl-modules"
 and "perl-doc").

perl-debug: debug-enabled Perl interpreter

 debugperl provides a debug-enabled version of Perl which can produce
 extensive information about the interpreter as it compiles and executes
 a program (see the -D switch in perlrun(1)).
 Note that this package is primarily of use in debugging *Perl* rather
 than perl programs, which may be traced/debugged using the standard
 perl binary using the -d switch (see perldebug(1)).

perl-doc: Perl documentation

 Perl manual pages, POD documentation and the `perldoc' program. If you are
 writing Perl programs, you almost certainly need this.

perl-modules: Core Perl modules

 Architecture independent Perl modules. These modules are part of Perl and
 required if the `perl' package is installed.
 Note that this package only exists to save archive space and should be
 considered an internal implementation detail of the `perl' package.
 Other packages should not depend on `perl-modules' directly, they
 should use `perl' (which depends on `perl-modules') instead.