FS#78712 - [security] [perl] CVE-2023-31484

Attached to Project: Arch Linux
Opened by T.J. Townsend (blakkheim) - Monday, 05 June 2023, 15:25 GMT
Last edited by T.J. Townsend (blakkheim) - Tuesday, 06 June 2023, 19:53 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Florian Pritz (bluewind)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The perl package is vulnerable to CVE-2023-31484. The attached diff backports the upstream fix for it. Also dropped a few needless "cd $srcdir" while here.

Additional info:
https://github.com/andk/cpanpm/pull/175
   perl.diff (2.4 KiB)
This task depends upon

Closed by  T.J. Townsend (blakkheim)
Tuesday, 06 June 2023, 19:53 GMT
Reason for closing:  Deferred
Additional comments about closing:  Made a merge request instead: https://gitlab.archlinux.org/archlinux/p ackaging/packages/perl/-/merge_requests/ 1

Loading...