[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#31797] [PATCH] gnu: perl: Fix CVE-2018-12015.
|
From: |
Marius Bakke |
|
Subject: |
[bug#31797] [PATCH] gnu: perl: Fix CVE-2018-12015. |
|
Date: |
Sat, 16 Jun 2018 21:38:28 +0200 |
|
User-agent: |
Notmuch/0.26.2 (https://notmuchmail.org) Emacs/26.1 (x86_64-pc-linux-gnu) |
address@hidden (Ludovic Courtès) writes:
> Hello Marius,
>
> Marius Bakke <address@hidden> skribis:
>
>> * gnu/packages/patches/perl-archive-tar-CVE-2018-12015.patch: New file.
>> * gnu/local.mk (dist_patch_DATA): Register it.
>> * gnu/packages/perl.scm (perl-5.26.2)[source](patches): Use it.
>
> LGTM. Thanks for taking care of it!
Excellent, pushed!
> I wonder if it’s an option to remove some of the bundled libraries that
> come with Perl, or whether packages rely of them as part of Perl proper.
That would be great.
signature.asc
Description: PGP signature