Format: 1.8
Date: Thu, 05 Apr 2018 08:48:47 -0400
Source: perl
Binary: perl-base perl-doc perl-debug libperl5.22 libperl-dev perl-modules-5.22 perl
Architecture: i386 i386_translations
Version: 5.22.1-9ubuntu0.3
Distribution: xenial
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-023.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libperl-dev - Perl library: development files
 libperl5.22 - shared Perl library
 perl       - Larry Wall's Practical Extraction and Report Language
 perl-base  - minimal Perl system
 perl-debug - debug-enabled Perl interpreter
 perl-doc   - Perl documentation
 perl-modules-5.22 - Core Perl modules
Changes:
 perl (5.22.1-9ubuntu0.3) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: arbitrary code exec via library in cwd
     - debian/patches/fixes/CVE-2016-6185.patch: properly handle paths in
       dist/XSLoader/XSLoader_pm.PL, dist/XSLoader/t/XSLoader.t.
     - CVE-2016-6185
   * SECURITY UPDATE: race condition in rmtree and remove_tree
     - debian/patches/fixes/CVE-2017-6512-pre.patch: correct the order of
       tests of chmod() in cpan/ExtUtils-Command/t/eu_command.t.
     - debian/patches/fixes/CVE-2017-6512.patch: prevent race in
       cpan/File-Path/lib/File/Path.pm, cpan/File-Path/t/Path.t.
     - CVE-2017-6512
   * SECURITY UPDATE: heap write overflow bug
     - debian/patches/fixes/CVE-2018-6797.patch: restart a node if we change
       to uni rules within the node and encounter a sharp S in regcomp.c.
     - CVE-2018-6797
   * SECURITY UPDATE: heap read overflow bug
     - debian/patches/fixes/CVE-2018-6798-1.patch: check lengths in
       regexec.c, t/lib/warnings/regexec.
     - debian/patches/fixes/CVE-2018-6798-2.patch: account for non-utf8
       target in regexec.c, t/re/re_tests.
     - debian/patches/fixes/CVE-2018-6798-3.patch: no longer warns in
       t/lib/warnings/regexec.
     - CVE-2018-6798
   * SECURITY UPDATE: heap buffer overflow bug
     - debian/patches/fixes/CVE-2018-6913.patch: fix various space
       calculation issues in pp_pack.c, t/op/pack.t.
     - CVE-2018-6913
Checksums-Sha1:
 814023871d18bf12be847342a61fef7efed93d19 2365508 libperl-dev_5.22.1-9ubuntu0.3_i386.deb
 3b8e28c56d4ff8459f30f07fffc0e98bec2f50d1 3046912 libperl5.22_5.22.1-9ubuntu0.3_i386.deb
 4fd340ce9c0862be0878109003f2f06d96009599 1372620 perl-base_5.22.1-9ubuntu0.3_i386.deb
 ffbb2eab66014b751224800bd995ad104ca37f01 5975842 perl-debug_5.22.1-9ubuntu0.3_i386.deb
 aed2e8562be54627f5bf5c13ca4a2c63b4b2c5b2 237276 perl_5.22.1-9ubuntu0.3_i386.deb
 c6cdc6ac699fc00005be642d315ee9ed5ffc13ba 914 perl_5.22.1-9ubuntu0.3_i386_translations.tar.gz
Checksums-Sha256:
 5f41e9e9c8b49657001eedc70f9534adffa29ad2938fc10fd821b3f0934bf2ff 2365508 libperl-dev_5.22.1-9ubuntu0.3_i386.deb
 7ad10c29db234a76190ee354084ee029418f06fa17eca94e1d70dae855345332 3046912 libperl5.22_5.22.1-9ubuntu0.3_i386.deb
 eb6e213be30114e94a131296104ea54be024ebe1bc32a1a7fc55da3241297227 1372620 perl-base_5.22.1-9ubuntu0.3_i386.deb
 535edcc326c5f2b61e31b77e505d88ed38496feb962c547d35a167a7d26f088c 5975842 perl-debug_5.22.1-9ubuntu0.3_i386.deb
 42d9ea78c9e6c6a6ca429ac0d82c735512a736271cab2949a22691080837cf7e 237276 perl_5.22.1-9ubuntu0.3_i386.deb
 eac70920d046c855d9ea1af0ba76ac50f02896b9092b1ffe5f270b34e2bb5fe3 914 perl_5.22.1-9ubuntu0.3_i386_translations.tar.gz
Files:
 ac2434506c1e53669e9a76ab253c47fb 2365508 libdevel optional libperl-dev_5.22.1-9ubuntu0.3_i386.deb
 6f476da67ab396183cf2bd307d1e49d2 3046912 libs optional libperl5.22_5.22.1-9ubuntu0.3_i386.deb
 3aa6ae0699231cf4af62a12cd3e1e0f9 1372620 perl required perl-base_5.22.1-9ubuntu0.3_i386.deb
 7e4ae94b43686e5d59a74ca072f2691c 5975842 devel extra perl-debug_5.22.1-9ubuntu0.3_i386.deb
 0b74b747771eb755189da78237ddd0ed 237276 perl standard perl_5.22.1-9ubuntu0.3_i386.deb
 8839bff5961d95caacc5848b0d2ad6d2 914 raw-translations - perl_5.22.1-9ubuntu0.3_i386_translations.tar.gz
Original-Maintainer: Niko Tyni <ntyni@debian.org>