-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 27 Jul 2016 14:34:39 +0100 Source: perl Binary: perl-base libcgi-fast-perl perl-doc perl-modules perl-debug libperl5.14 libperl-dev perl Architecture: all amd64 source Version: 5.14.2-21+deb7u4 Distribution: wheezy-security Urgency: high Maintainer: Niko Tyni <ntyni@debian.org> Changed-By: Dominic Hargreaves <dom@earth.li> Closes: 829578 Description: libcgi-fast-perl - CGI::Fast Perl module libperl5.14 - shared Perl library libperl-dev - Perl library: development files perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter perl-doc - Perl documentation perl - Larry Wall's Practical Extraction and Report Language perl-modules - Core Perl modules Changes: perl (5.14.2-21+deb7u4) wheezy-security; urgency=high . * [SECURITY] CVE-2016-1238: opportunistic loading of optional modules can make many programs unintentionally load code from the current working directory (which might be changed to another directory without the user realising). + allow user configurable removal of "." from @INC in /etc/perl/sitecustomize.pl for a transitional period. (See: #588017) + backport patches from [perl #127834] to fix known vulnerabilities even if the user does not configure "." to be removed from @INC + backport patches from [perl #127810] to fix various classes of build failures in perl and CPAN modules if "." is removed from @INC * Make XSLoader skip relative paths not on @INC. (Closes: #829578) Checksums-Sha1: bee2cb15171c45126bc68101cee6f135c5f377d6 2446 perl_5.14.2-21+deb7u4.dsc 7746eb147a00e6be55143303b19a89f3ef8010c2 153344 perl_5.14.2-21+deb7u4.debian.tar.xz c61b6dc7c0c327711d4615f024c3f1e0b5f89786 77194 libcgi-fast-perl_5.14.2-21+deb7u4_all.deb 3c91b2645f1e33dfd6a4b886c022442db005081f 8165038 perl-doc_5.14.2-21+deb7u4_all.deb da6110899a5a2e65c9658913c781a4da08cd2a7f 3441870 perl-modules_5.14.2-21+deb7u4_all.deb c58bf68e24798c87f3ca961ccbe1d41da9057a84 1521768 perl-base_5.14.2-21+deb7u4_amd64.deb 9db9b265b2bb98770e8cadafd820410451e0df94 8009990 perl-debug_5.14.2-21+deb7u4_amd64.deb 75ab04116c30c0f03c34b1a5f61741cdc1e6bf51 1182 libperl5.14_5.14.2-21+deb7u4_amd64.deb d56d64b4f66e9e0a0c8d1fa65d05dcad16e42351 3327698 libperl-dev_5.14.2-21+deb7u4_amd64.deb 3582e295688328a7c52fad7a9eddffbc694bc03d 4422050 perl_5.14.2-21+deb7u4_amd64.deb Checksums-Sha256: 4bd0ab0fcc868af8b9a4644742fcc341164596ca61fcdbe5698b9a69fc655a9b 2446 perl_5.14.2-21+deb7u4.dsc ee94ab9aa3a5b764f5c26f2eff989f1a8618e9a959f19073b3dd9016a6351a2a 153344 perl_5.14.2-21+deb7u4.debian.tar.xz 0c565ebaa94107a47faf5ba4ffb7a0578e93f1e293fbe88084615f4c4fb8ab69 77194 libcgi-fast-perl_5.14.2-21+deb7u4_all.deb e5d6c795ad354611b9ac4bc3593cafe33159116517cc20e3ca43c70c7aa83a86 8165038 perl-doc_5.14.2-21+deb7u4_all.deb 3424605887814924c19894ffb064dd988e5b7e7565fa0af8cff3093ea1fa7af1 3441870 perl-modules_5.14.2-21+deb7u4_all.deb 9723473cb573aa27bff22137ddaea24fc814e0222b9b5c07b039b4071d54d325 1521768 perl-base_5.14.2-21+deb7u4_amd64.deb a85260d2b9a74e42c2a8126bd45e4486fdd9679c6643609180fa32e8c80a688a 8009990 perl-debug_5.14.2-21+deb7u4_amd64.deb da4d6db5e6976eadfb505fc896983b0a19a6d616717eb5ce3c35614d270d4278 1182 libperl5.14_5.14.2-21+deb7u4_amd64.deb 18c2dd14ab8a6ac91a4d388f99e3d79f9be93920fda23ae8763447f4dc690ac9 3327698 libperl-dev_5.14.2-21+deb7u4_amd64.deb 0b4df7c0674420d27f39c4576b8618b0d6c835953dcc4bc6a59d96c01d8990e2 4422050 perl_5.14.2-21+deb7u4_amd64.deb Files: e54a40c1a435e5c1cef52c71625d7d3c 2446 perl standard perl_5.14.2-21+deb7u4.dsc 4bc172206f720b6dff68b25ba57cbb6e 153344 perl standard perl_5.14.2-21+deb7u4.debian.tar.xz 531aa7b35f244ebde5ed92eec9558257 77194 perl optional libcgi-fast-perl_5.14.2-21+deb7u4_all.deb f832961d9f19da9a79c5e8706ae071b9 8165038 doc optional perl-doc_5.14.2-21+deb7u4_all.deb 7980249899c21487bf4e964d9a3331e7 3441870 perl standard perl-modules_5.14.2-21+deb7u4_all.deb 772895e014769629426722007c5a63be 1521768 perl required perl-base_5.14.2-21+deb7u4_amd64.deb 8d0ad861f37916d6ea83c12fcf8f2e7f 8009990 debug extra perl-debug_5.14.2-21+deb7u4_amd64.deb f2128616a877ea48b5d8b8afccbb20ed 1182 libs optional libperl5.14_5.14.2-21+deb7u4_amd64.deb f70aa2bbfad9308abb467bbfd260bd7a 3327698 libdevel optional libperl-dev_5.14.2-21+deb7u4_amd64.deb 4cc45089ae401d862ebe3804e2dc31ed 4422050 perl standard perl_5.14.2-21+deb7u4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJXmhYgAAoJEMAFfnFNaU+yKFEQAJVPBvJkyaB9ataRgvsB2NBI r499gVjoylBy/kGF46qEgxdS0c5BS8NotyvU5xDuxbFNOhBK0d+5qRjnIXyK6ANh XPVXjIhrlM/Sx5k3q8NJVeLC8qAIz8GWedl+zW412JHpjIxUhUa6p70KlIMcWg0U 5da10OYAizsvrUMRu+G/VdEqPG+pSDXXX8NOer7omT/X/Y+QkVOP/5ag8bNnEoJ2 mv3iLQ6/mrw/Ohcv4D6ARVvfifSR1jhTztll1SBPj/SieA0o3QaVjHmjjKmlIdia fHv66KLZ2Gu21HLeJ7FoGuc8N0lQ+6yCF8h2I99CAvILmi3Sd9X2leS73NU3haNV c/ajmkDbhmrcRIUIvsmCmBmeTzF8v5inKSOF1Mt4umigllrjc9G4hguhzPnznIr0 qGVkjnidGC6eOHtPoNM4uKjrCy/JVgEGqWPwhKNmzQuiuubL6IKXyrQ6eVxECH0R ke4RdBV6VguhL+S+yA1mqZlVLRWRgdnJjGyQb2VNBHMvuPLnkhrTZQsmPS9SxFYz 2j7EGrQPJRL8wKhmaGNl94n+7weiw3PKMza6NLxI49Ict1szSH6YvZEJ3Aq/NUee dVWIuyR1mhEmUsozIeFVkSJbTWuNTzAK79X1aFkxoMN9+LoyUt4JgSFTaqGJLmTi N+SzuwP+SAUQY4JXHppZ =Bx8Y -----END PGP SIGNATURE-----
