-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 10 Mar 2018 20:39:49 +0200 Source: perl Binary: perl-base perl-doc perl-debug libperl5.24 libperl-dev perl-modules-5.24 perl Architecture: source Version: 5.24.1-3+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Niko Tyni <ntyni@debian.org> Changed-By: Niko Tyni <ntyni@debian.org> Description: libperl-dev - Perl library: development files libperl5.24 - shared Perl library perl - Larry Wall's Practical Extraction and Report Language perl-base - minimal Perl system perl-debug - debug-enabled Perl interpreter perl-doc - Perl documentation perl-modules-5.24 - Core Perl modules Changes: perl (5.24.1-3+deb9u3) stretch-security; urgency=high . * [SECURITY] CVE-2018-6797: buffer overflow related to regex unicode semantics. * [SECURITY] CVE-2018-6798: heap buffer overflow when matching malformed UTF-8 characters. * [SECURITY] CVE-2018-6913: heap buffer overflow with large data blocks. Checksums-Sha1: ecd42b6e35fe418ee9760f6b4787ef2480fff992 2372 perl_5.24.1-3+deb9u3.dsc 45499cdc826a16674dea7896c36f06a34574b22c 178988 perl_5.24.1-3+deb9u3.debian.tar.xz 4cf91008578abdcf9d07f6f8dd00fd07eb1e9f74 4746 perl_5.24.1-3+deb9u3_source.buildinfo Checksums-Sha256: ef88a406368034beed653af8300842a089954623fc53bdff7fa3ef64278ed68f 2372 perl_5.24.1-3+deb9u3.dsc ec40e37d67e05aeb3fea641dc795b5e9d3dc8bbc9943b7f5d87aad889b3ac16c 178988 perl_5.24.1-3+deb9u3.debian.tar.xz 2f17c55617e8c78d1d7c7da22b139cb666957a3adfcdc9e857f074b29a6ccbef 4746 perl_5.24.1-3+deb9u3_source.buildinfo Files: fafbffa9ecf8d6545b2ce2f436f6b87f 2372 perl standard perl_5.24.1-3+deb9u3.dsc 02e17ec24c495c793d89f08677f2401c 178988 perl standard perl_5.24.1-3+deb9u3.debian.tar.xz 9752cfb3bfd51621402e005fc045d5ed 4746 perl standard perl_5.24.1-3+deb9u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEdqKOQsmBHZHoj7peLsD/s7cwGx8FAlrQ09IACgkQLsD/s7cw Gx/aWg//Rb8K+NAHcoydcF0/cShxqtDTJ8joY/HgODdHgqiIfln6PqhHY2IotfP0 u87WvEQzRBoHHIVmBp3hVUmgoG35qyNpNTtTZrm/LQAG6y/WmevmpDjXe7YdiQLW HnRfYYZmHs/a4O/ZyervuhdgQa5dYtgGEJfzMgdXQplJ6gGbBxfazyA16lkb2c3D 3P5AoKv2HDYL4lwaOPDqhADjqr9rCvZHZBqtp0ICdL7XXjM3w6dc/a57e9EFVOlp L/RaTXKf9OdEwkc1KaZ2oFHyFZPvnbbRFFdkI540dkYAkEMLKhDvVlXx53bfBTBp ChbvUsdMywyz2EJ7Gvi9zSaFZjDHUalkYfHrlpyYU534ueJKrWkibagA4eNrDc1K Cj/KdmPD1LT22UEt1aQiKe+GoTE2N+eXyvHFaXPePtIT9jctHSceT12T7FhfmbDp ifKGXINbWbFmv0GrsVfM1847+Vi6+JcySjd0vvn/nBuqERUh6ZxbmXPUiMcwRzYz CJ/VagN+57EDgidIgdH5Zbd3HIdeGg8XKYBcV2SCxiSk9VY5A4sT+CfA82LK3z8J RK1ixR82HwL8SBIayXSrECqLYu3X62z21x6uvTY9IAA/y9ArJr95ZppcKin2MGsl +kuZlxP8bKzycVGIf3JLmxE0mVGpbgIZOjTIMxup/pKhJqYJZ/Y= =Eahf -----END PGP SIGNATURE-----