File _patchinfo of Package patchinfo.2712

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.2712

<patchinfo incident="2712">
  <issue id="932894" tracker="bnc">Request for perl updates</issue>
  <issue id="928292" tracker="bnc">Perl has an UTF-8 related memory leak causing massive trouble for long-running tasks</issue>
  <issue id="988311" tracker="bnc">VUL-0: perl: CVE-2016-6185 perl: XSLoader loads relative paths not included in @INC</issue>
  <issue id="987887" tracker="bnc">VUL-0: CVE-2016-1238: perl: loading modules from current directory</issue>
  <issue id="967082" tracker="bnc">VUL-0: CVE-2016-2381: perl: environment handling bug</issue>
  <issue id="984906" tracker="bnc">perl: taint-mode error: "Insecure dependency in require"</issue>
  <issue id="2015-8853" tracker="cve" />
  <issue id="2016-1238" tracker="cve" />
  <issue id="2016-2381" tracker="cve" />
  <issue id="2016-6185" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>mlschroe</packager>
  <description>
This update for Perl fixes the following issues:

- CVE-2016-6185: Xsloader looking at a "(eval)" directory. (bsc#988311)
- CVE-2016-1238: Searching current directory for optional modules. (bsc#987887)
- CVE-2015-8853: Regular expression engine hanging on bad utf8. (bsc)
- CVE-2016-2381: Environment dup handling bug. (bsc#967082)
- "Insecure dependency in require" error in taint mode. (bsc#984906)
- Memory leak in 'use utf8' handling. (bsc#928292)
- Missing lock prototype to the debugger. (bsc#932894)
</description>
  <summary>Security update for perl</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.2712

Places