Your message dated Sat, 26 Jul 2008 09:57:50 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#454792: fixed in perl 5.8.8-7etch3
has caused the Debian Bug report #454792,
regarding utf8-related crash
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
454792: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: perl-base
Version: 5.8.8-6
Severity: important
here is a file test.pl, uuencoded to preserve the non-ascii characters:
begin 644 test.pl
M(R$O=7-R+V)I;B]P97)L"@IU<V4@<W1R:6-T.PIU<[EMAIL PROTECTED];V1I;F<@(G5T
[EMAIL PROTECTED]:[EMAIL
PROTECTED]"='><.V<FEVPZ%N>6DM4L.A=&@G(#U^(&TO7&+#G&[#O'-A
M;B!+=6QO9VQU7&(O:2D@>WT*:[EMAIL PROTECTED]"=(86-H871U<F]V)R`]?B!M+UQB(D)A
B<G-H86DB($-H86UB97(@3W)C:&5S=')A7&(O:2D@>WT*"@``
`
end
when i run "perl test.pl", i ge ta crash:
$ perl test.pl
*** glibc detected *** double free or corruption (!prev): 0x08245ca0 ***
Aborted
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-1-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages perl-base depends on:
ii libc6 2.3.6-15 GNU C Library: Shared libraries
perl-base recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: perl
Source-Version: 5.8.8-7etch3
We believe that the bug you reported is fixed in the latest version of
perl, which is due to be installed in the Debian FTP archive:
libcgi-fast-perl_5.8.8-7etch3_all.deb
to pool/main/p/perl/libcgi-fast-perl_5.8.8-7etch3_all.deb
libperl-dev_5.8.8-7etch3_amd64.deb
to pool/main/p/perl/libperl-dev_5.8.8-7etch3_amd64.deb
libperl5.8_5.8.8-7etch3_amd64.deb
to pool/main/p/perl/libperl5.8_5.8.8-7etch3_amd64.deb
perl-base_5.8.8-7etch3_amd64.deb
to pool/main/p/perl/perl-base_5.8.8-7etch3_amd64.deb
perl-debug_5.8.8-7etch3_amd64.deb
to pool/main/p/perl/perl-debug_5.8.8-7etch3_amd64.deb
perl-doc_5.8.8-7etch3_all.deb
to pool/main/p/perl/perl-doc_5.8.8-7etch3_all.deb
perl-modules_5.8.8-7etch3_all.deb
to pool/main/p/perl/perl-modules_5.8.8-7etch3_all.deb
perl-suid_5.8.8-7etch3_amd64.deb
to pool/main/p/perl/perl-suid_5.8.8-7etch3_amd64.deb
perl_5.8.8-7etch3.diff.gz
to pool/main/p/perl/perl_5.8.8-7etch3.diff.gz
perl_5.8.8-7etch3.dsc
to pool/main/p/perl/perl_5.8.8-7etch3.dsc
perl_5.8.8-7etch3_amd64.deb
to pool/main/p/perl/perl_5.8.8-7etch3_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Florian Weimer <[EMAIL PROTECTED]> (supplier of updated perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Fri, 25 Apr 2008 21:12:00 +0200
Source: perl
Binary: perl-base libcgi-fast-perl libperl-dev perl-debug perl-modules perl
libperl5.8 perl-suid perl-doc
Architecture: source amd64 all
Version: 5.8.8-7etch3
Distribution: stable-security
Urgency: high
Maintainer: Brendan O'Dea <[EMAIL PROTECTED]>
Changed-By: Florian Weimer <[EMAIL PROTECTED]>
Description:
libcgi-fast-perl - CGI::Fast Perl module
libperl-dev - Perl library: development files
libperl5.8 - Shared Perl library
perl - Larry Wall's Practical Extraction and Report Language
perl-base - The Pathologically Eclectic Rubbish Lister
perl-debug - Debug-enabled Perl interpreter
perl-doc - Perl documentation
perl-modules - Core Perl modules
perl-suid - Runs setuid Perl scripts
Closes: 454792
Changes:
perl (5.8.8-7etch3) stable-security; urgency=high
.
* Actually apply the patch to fix CVE-2008-1927, a heap overflow in the
UTF-8 regexp compiler. Closes: #454792.
Files:
a64a02ca01379537d6b203f10b4057b0 1033 perl standard perl_5.8.8-7etch3.dsc
ac6b2e452c2062c5e98148f55220b9f3 99389 perl standard perl_5.8.8-7etch3.diff.gz
dfc3818aa0723f40b5ef8d5ca73d06e6 41038 perl optional
libcgi-fast-perl_5.8.8-7etch3_all.deb
36d0578f3232446b96d10f3488c23949 7348642 doc optional
perl-doc_5.8.8-7etch3_all.deb
6150633786b45319e72c73ab60a20d5a 2313550 perl standard
perl-modules_5.8.8-7etch3_all.deb
02d678a10a760c707043700080fe6677 809292 perl required
perl-base_5.8.8-7etch3_amd64.deb
cc9d44d140168420a31f976087a6848b 2735170 perl optional
perl-debug_5.8.8-7etch3_amd64.deb
153d300bc6ffad71441acf04afde4803 32798 perl optional
perl-suid_5.8.8-7etch3_amd64.deb
650fb6254665901c0cb840f910954a11 1010 libs optional
libperl5.8_5.8.8-7etch3_amd64.deb
14542161388a8c503c7a7abb6d33d4d4 630678 libdevel optional
libperl-dev_5.8.8-7etch3_amd64.deb
6e0392904c08c4fba6bb93ee1ace7dd0 4237990 perl standard
perl_5.8.8-7etch3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iQEVAwUBSBIz7r97/wQC1SS+AQLk0Af/bJfCFzsX+UaTgjQWVaSkIZKVzRAX4tUA
5W5OJ3MoTXmR64bQnPIv1anS6ovz/Y9pIj7iqMcslkICXQUMdIba85z36HgoOcRz
2M1y08OSbj52xv4p+Bip+B+8hMfNQbz99Tb3vKoCYE9hK8aQ3fBmPG6YG35FgHA2
w+gSIkMFw6dWOpV0ZSzU5U7WxcBn+JDVXcxiaBHG6ShOQa5a1IuFFuMEyP1cDp2E
jhLXYzF3CkRT5oo0GCobzUqlT1nzb1PicSEsnw1UmN8i0juumw1T/Qcpz8aS7/yk
dHa1AOXNCMl61aG6LFCheH62VXhI4lbdPrZBnwuHKRdtRAtB2p79Pw==
=gmuV
-----END PGP SIGNATURE-----
--- End Message ---
