perl 5.18.2-2ubuntu1.7 source package in Ubuntu


perl (5.18.2-2ubuntu1.7) trusty-security; urgency=medium

  * SECURITY UPDATE: Integer overflow leading to buffer overflow
    - debian/patches/fixes/CVE-2018-18311.patch: handle integer wrap in
    - CVE-2018-18311
  * SECURITY UPDATE: Heap-buffer-overflow read
    - debian/patches/fixes/CVE-2018-18313.patch: convert some strchr to
      memchr in regcomp.c.
    - CVE-2018-18313

 -- Marc Deslauriers <email address hidden>  Tue, 20 Nov 2018 09:27:15 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2018-11-20
Uploaded to:
Original maintainer:
Ubuntu Developers
any all
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates on 2018-12-03 main perl
Trusty security on 2018-12-03 main perl


File Size SHA-256 Checksum
perl_5.18.2.orig.tar.bz2 13.4 MiB 06a0cd490be36d829606aa41d8c9c4c72ae70542f8d4f23ec554335b3d9e2746
perl_5.18.2-2ubuntu1.7.debian.tar.gz 143.4 KiB ea6a3ddea4829605cb0dbf59701fe73f7843d7275137c14164a908db36c50ef4
perl_5.18.2-2ubuntu1.7.dsc 2.4 KiB c3df84db697577b3f0415de1054c5e127b5013e982dc7b31e6129b6b6bc051df

View changes file

Binary packages built by this source

libcgi-fast-perl: CGI::Fast Perl module

 CGI::Fast is a subclass of the CGI object created by It is
 specialized to work well with the Open Market FastCGI standard, which
 greatly speeds up CGI scripts by turning them into persistently running
 server processes. Scripts that perform time-consuming initialization
 processes, such as loading large modules or opening persistent database
 connections, will see large performance improvements.

libperl-dev: Perl library: development files

 Files for developing applications which embed a Perl interpreter.

libperl5.18: shared Perl library

 This package is required by programs which embed a Perl interpreter to
 ensure that the correct version of `perl-base' is installed. It
 additionally contains the shared Perl library on architectures where the
 perl binary is linked to libperl.a (currently only i386, for performance
 reasons). In other cases the actual library is in the `perl-base' package.

perl: Larry Wall's Practical Extraction and Report Language

 Perl is a highly capable, feature-rich programming language with over
 20 years of development. Perl 5 runs on over 100 platforms from
 portables to mainframes. Perl is suitable for both rapid prototyping
 and large scale development projects.
 Perl 5 supports many programming styles, including procedural,
 functional, and object-oriented. In addition to this, it is supported
 by an ever-growing collection of reusable modules which accelerate
 development. Some of these modules include Web frameworks, database
 integration, networking protocols, and encryption. Perl provides
 interfaces to C and C++ for custom extension development.

perl-base: minimal Perl system

 Perl is a scripting language used in many system scripts and utilities.
 This package provides a Perl interpreter and the small subset of the
 standard run-time library required to perform basic tasks. For a full
 Perl installation, install "perl" (and its dependencies, "perl-modules"
 and "perl-doc").

perl-debug: debug-enabled Perl interpreter

 debugperl provides a debug-enabled version of Perl which can produce
 extensive information about the interpreter as it compiles and executes
 a program (see the -D switch in perlrun(1)).
 Note that this package is primarily of use in debugging *Perl* rather
 than perl programs, which may be traced/debugged using the standard
 perl binary using the -d switch (see perldebug(1)).

perl-doc: Perl documentation

 Perl manual pages, POD documentation and the `perldoc' program. If you are
 writing Perl programs, you almost certainly need this.

perl-modules: Core Perl modules

 Architecture independent Perl modules. These modules are part of Perl and
 required if the `perl' package is installed.
 Note that this package only exists to save archive space and should be
 considered an internal implementation detail of the `perl' package.
 Other packages should not depend on `perl-modules' directly, they
 should use `perl' (which depends on `perl-modules') instead.