All the Perl that's Practical to Extract and Report
use Perl Log In
ddick (5726)
ddick
(email not shown publicly)
I'm based out of Melbourne, Australia. I attend the excellent melbourne.pm.org meetings whenever i get the chance, which is not often enough.
(email not shown publicly)
I'm based out of Melbourne, Australia. I attend the excellent melbourne.pm.org meetings whenever i get the chance, which is not often enough.
Tuesday November 27, 2007
06:45 PM
where to go for perl with CVE-2007-5116 patch?
I can't figure out how to get a source version of perl with recent security fixes applied to it, or even get a patch to apply to 5.8.8 or similiar. What am i missing?
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Life is ridiculous.
--Larry Wall in Configure from the perl distribution
Stories, comments, journals, and other submissions on use Perl; are Copyright 1998-2006, their respective owners.
I just googled for this (Score:1)
I don't know why this isn't hasn't been addressed in an official Perl release. (5.8.9 anyone?)
Re: (Score:1)
Google is your friend.
See comment up and over.
Bill
Bill
# I had a sig when sigs were cool
use Sig;
The patch is in ... but not there yet (Score:1)
Nicholas applied the patch to maint-58 [activestate.com] on 11/06.
I haven't heard what if any plan there is for a 5.8.9 as you suggest - CPAN regression testing is pretty busy with 5.10-RC2. Vendors / downstream distros are applying the patch to their 5.8.8+, as they should. If you have a security-critical perl app that isn't carefully untainting user-supplied
Bill
# I had a sig when sigs were cool
use Sig;
Re: (Score:1)
Re:The patch is in ... AND IS there NOW (Score:1)
Google didn't find the 11/15 p5p msg [perl.org] the other day, but it does now.
Bill
# I had a sig when sigs were cool
use Sig;