Accepted perl 5.14.2-21+deb7u6 (source all amd64) into oldoldstable

Niko Tyni ntyni at debian.org
Sun Apr 15 20:13:31 BST 2018


On Sun, Apr 15, 2018 at 01:54:53PM +0100, Dominic Hargreaves wrote:
> On Sat, Apr 14, 2018 at 11:10:33PM +0000, Emilio Pozuelo Monfort wrote:
> > Changes: 
> >  perl (5.14.2-21+deb7u6) wheezy-security; urgency=medium
> >  .
> >    * [SECURITY] CVE-2018-6913: heap buffer overflow with large data blocks.
> 
> FTR, I have imported this into our git repository, but not tagged it.
> The contents vary from the upload because of patch ordering changes
> made by git-dpm.

Thanks. FWIW Emilio mailed me his commits (attached),
not sure if it's worth trying to merge them into the repo too.
-- 
Niko
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-CVE-2018-6913-heap-buffer-overflow-with-large-data-b.patch
Type: text/x-diff
Size: 7114 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/perl-maintainers/attachments/20180415/4252de4a/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-releasing-package-perl-version-5.14.2-21-deb7u6.patch
Type: text/x-diff
Size: 651 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/perl-maintainers/attachments/20180415/4252de4a/attachment-0001.patch>


More information about the Perl-maintainers mailing list