Format: 1.8
Date: Wed, 05 Oct 2022 07:27:25 -0300
Source: perl
Binary: libperl-dev libperl5.30 perl perl-base perl-debug
Architecture: armhf armhf_translations
Version: 5.30.0-9ubuntu0.3
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-011.buildd>
Changed-By: Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>
Description:
 libperl-dev - Perl library: development files
 libperl5.30 - shared Perl library
 perl       - Larry Wall's Practical Extraction and Report Language
 perl-base  - minimal Perl system
 perl-debug - debug-enabled Perl interpreter
Changes:
 perl (5.30.0-9ubuntu0.3) focal-security; urgency=medium
 .
   * SECURITY UPDATE: Signature verification bypass
     - debian/patches/CVE-2020-16156-1.patch: signature
       verification type CANNOT_VERIFY was not recognized
       in cpan/CPAN/lib/CPAN/Distribution.pm.
     - debia/patches/CVE-2020-16156-2.patch: add two new failure modes
       in cpan/CPAN/lib/CPAN/Distribution.pm.
     - debian/patches/CVE-2020-16156-3.patch: use gpg
       to disentangle data and signature in cpan/CPAN/lib/CPAN/Distribution.pm.
     - debian/patches/CVE-2020-16156-4.patch: replacing die with mydie in
       three spots in cpan/CPAN/lib/CPAN/Distribution.pm.
     - debian/patches/CVE-2020-16156-5.patch: disambiguate the call
       to gpg --output by adding --verify in
       cpan/CPAN/lib/CPAN/Distribution.pm.
     - debian/patches/CVE-2020-16156-6.patch: corrects typo
       in cpan/CPAN/lib/CPAN/Distribution.pm.
     - debian/patches/CVE-2020-16156-7.patch: corrects typo
       in cpan/CPAN/lib/CPAN/Distribution.pm.
     - CVE-2020-16156
Checksums-Sha1:
 c52c5c2d5c7d8d5e8629b0f7f4007488760a8b37 882980 libperl-dev_5.30.0-9ubuntu0.3_armhf.deb
 b614dfd6d18a497abc441d8fbae015e3e3b2037b 3274120 libperl5.30_5.30.0-9ubuntu0.3_armhf.deb
 26f5850bcea764d392fdf8f7d39410446d22873f 1409004 perl-base_5.30.0-9ubuntu0.3_armhf.deb
 dc00cc92b7eb7cf6efddb877a24c8f838e38814f 10081632 perl-debug_5.30.0-9ubuntu0.3_armhf.deb
 5b1bd1fc589f1ca54fd7e0a26b7d082d89c5136a 7018 perl_5.30.0-9ubuntu0.3_armhf.buildinfo
 4ebe8f51fde28c2c7f1d0d80247b55dc227489bb 224120 perl_5.30.0-9ubuntu0.3_armhf.deb
 b8b486717f4ff748ef7ad48a142bd518ae6644af 1510 perl_5.30.0-9ubuntu0.3_armhf_translations.tar.gz
Checksums-Sha256:
 ee76ffb1e509b576b0ddce21ca3fbee7f2ac170862d58027799c37ce858a4b78 882980 libperl-dev_5.30.0-9ubuntu0.3_armhf.deb
 0e273533e218d55c9e4964a928a7d7ffec55efedb7a175d66546b0f9ea1e46f1 3274120 libperl5.30_5.30.0-9ubuntu0.3_armhf.deb
 8fc6792402f4a9286036654f6e21bdbe58d00f16654988d98f0939dad708cdd9 1409004 perl-base_5.30.0-9ubuntu0.3_armhf.deb
 840801e82d869b37065e34f06d9a005497fb1f7dafc932bc120634069c47321c 10081632 perl-debug_5.30.0-9ubuntu0.3_armhf.deb
 fb709690ca7f8690427e66194e43c67d05081fd03fca254243caebc459f2043d 7018 perl_5.30.0-9ubuntu0.3_armhf.buildinfo
 fee7938437c067661ef8f91435636e4c656aaf98c62754f67e3b315043b8979d 224120 perl_5.30.0-9ubuntu0.3_armhf.deb
 947312139ec57310e64651943aaeebb9c3eb62449701e175471953e7875dc80d 1510 perl_5.30.0-9ubuntu0.3_armhf_translations.tar.gz
Files:
 97a9a7e64139a06edb09b06a5eb27a49 882980 libdevel optional libperl-dev_5.30.0-9ubuntu0.3_armhf.deb
 aebd56fa316ec9d97770ebe775355825 3274120 libs optional libperl5.30_5.30.0-9ubuntu0.3_armhf.deb
 ed38e10d9f8e84418fb429da9ea07a61 1409004 perl required perl-base_5.30.0-9ubuntu0.3_armhf.deb
 bba36719ef305249bfcb406555e3b818 10081632 devel optional perl-debug_5.30.0-9ubuntu0.3_armhf.deb
 becd40137cf39dd8c2e45a91d483b95c 7018 perl standard perl_5.30.0-9ubuntu0.3_armhf.buildinfo
 459180da7be09b4e313773f6018c5df0 224120 perl standard perl_5.30.0-9ubuntu0.3_armhf.deb
 6b665ceac5cbf044ccb353659f157fed 1510 raw-translations - perl_5.30.0-9ubuntu0.3_armhf_translations.tar.gz
Original-Maintainer: Niko Tyni <ntyni@debian.org>