perl 5.22.1-9ubuntu0.3 source package in Ubuntu


perl (5.22.1-9ubuntu0.3) xenial-security; urgency=medium

  * SECURITY UPDATE: arbitrary code exec via library in cwd
    - debian/patches/fixes/CVE-2016-6185.patch: properly handle paths in
      dist/XSLoader/XSLoader_pm.PL, dist/XSLoader/t/XSLoader.t.
    - CVE-2016-6185
  * SECURITY UPDATE: race condition in rmtree and remove_tree
    - debian/patches/fixes/CVE-2017-6512-pre.patch: correct the order of
      tests of chmod() in cpan/ExtUtils-Command/t/eu_command.t.
    - debian/patches/fixes/CVE-2017-6512.patch: prevent race in
      cpan/File-Path/lib/File/, cpan/File-Path/t/Path.t.
    - CVE-2017-6512
  * SECURITY UPDATE: heap write overflow bug
    - debian/patches/fixes/CVE-2018-6797.patch: restart a node if we change
      to uni rules within the node and encounter a sharp S in regcomp.c.
    - CVE-2018-6797
  * SECURITY UPDATE: heap read overflow bug
    - debian/patches/fixes/CVE-2018-6798-1.patch: check lengths in
      regexec.c, t/lib/warnings/regexec.
    - debian/patches/fixes/CVE-2018-6798-2.patch: account for non-utf8
      target in regexec.c, t/re/re_tests.
    - debian/patches/fixes/CVE-2018-6798-3.patch: no longer warns in
    - CVE-2018-6798
  * SECURITY UPDATE: heap buffer overflow bug
    - debian/patches/fixes/CVE-2018-6913.patch: fix various space
      calculation issues in pp_pack.c, t/op/pack.t.
    - CVE-2018-6913

 -- Marc Deslauriers <email address hidden>  Thu, 05 Apr 2018 08:48:47 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2018-04-11
Uploaded to:
Original maintainer:
Ubuntu Developers
any all
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section


File Size SHA-256 Checksum
perl_5.22.1.orig.tar.xz 10.7 MiB 9e87317d693ce828095204be0d09af8d60b8785533fadea1a82b6f0e071e5c79
perl_5.22.1-9ubuntu0.3.debian.tar.xz 152.9 KiB 4febf3de21b4ef37be0d1d53549e6ce12199d8bd6a8a701cd9a1d98ac346f634
perl_5.22.1-9ubuntu0.3.dsc 2.4 KiB 30830c674f0bcf58d018d6d1a326e8342fee37388f8593b376b863d4040a787a

View changes file

Binary packages built by this source

libperl-dev: Perl library: development files

 Files for developing applications which embed a Perl interpreter.

libperl5.22: shared Perl library

 This package contains the shared Perl library, used by applications
 which embed a Perl interpreter.
 It also contains the architecture-dependent parts of the standard
 library (and depends on perl-modules-5.22 which contains the
 architecture-independent parts).

perl: Larry Wall's Practical Extraction and Report Language

 Perl is a highly capable, feature-rich programming language with over
 20 years of development. Perl 5 runs on over 100 platforms from
 portables to mainframes. Perl is suitable for both rapid prototyping
 and large scale development projects.
 Perl 5 supports many programming styles, including procedural,
 functional, and object-oriented. In addition to this, it is supported
 by an ever-growing collection of reusable modules which accelerate
 development. Some of these modules include Web frameworks, database
 integration, networking protocols, and encryption. Perl provides
 interfaces to C and C++ for custom extension development.

perl-base: minimal Perl system

 Perl is a scripting language used in many system scripts and utilities.
 This package provides a Perl interpreter and the small subset of the
 standard run-time library required to perform basic tasks. For a full
 Perl installation, install "perl" (and its dependencies, "perl-modules-5.22"
 and "perl-doc").

perl-debug: debug-enabled Perl interpreter

 debugperl provides a debug-enabled version of Perl which can produce
 extensive information about the interpreter as it compiles and executes
 a program (see the -D switch in perlrun(1)).
 Note that this package is primarily of use in debugging *Perl* rather
 than perl programs, which may be traced/debugged using the standard
 perl binary using the -d switch (see perldebug(1)).

perl-doc: Perl documentation

 Perl manual pages, POD documentation and the `perldoc' program. If you are
 writing Perl programs, you almost certainly need this.

perl-modules-5.22: Core Perl modules

 Architecture independent Perl modules. These modules are part of Perl and
 required if the `perl' package is installed.
 Note that this package only exists to save archive space and should be
 considered an internal implementation detail of the `perl' package.
 Other packages should not depend on `perl-modules-5.22' directly, they
 should use `perl' (which depends on `perl-modules-5.22') instead.