Your message dated Wed, 25 May 2016 21:47:37 +0000
with message-id <[email protected]>
and subject line Bug#822336: fixed in perl 5.20.2-3+deb8u5
has caused the Debian Bug report #822336,
regarding perl: Stable update taking patches from 5.20.3
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
822336: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822336
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: perl
Version: 5.20.2-3+deb8u4
As discussed with Niko in recent weeks, I believe we should be importing
all relevant patches from maint releases of perl into Debian stable.
This provides Debian stable users with many important bugfixes that have
been reviewed and tested upstream already.
The upstream policy for stable releases is conservative and, IMO,
consistent with Debian's:
http://perldoc.perl.org/perlpolicy.html#MAINTENANCE-BRANCHES
I think we have already effectively ruled out importing 5.20.3
wholesale into Debian stable, because a version number change would
be more invasive than we want, even though it is in some ways the
most attractive option. Cherry-picking the relevant fixes will also
reduce the amount of code for the release team to review compared
to importing things relating to other platforms or non-functional
changes.
I analysed the 165 commits in upstream's git repository between
5.20.2 and 5.20.3 and selected what I believe to be the 40-odd
relevant patches (the others are either non-functional changes in
release notes, Module::CoreList or changes for platforms Debian does
not support).
One change fixes a bug which has been reported explicitly at
#820328, but it seems like only a matter of time before further bugs are
reported against Debian for things which are fixed in this release.
At the bottom of this message is a list of the commits I would
attempt to cherry-pick as part of this process (hashes from
upstream maint-5.20).
In terms of practicalities, my preferred approach would be to cherry-pick
the commits individually into the git-dpm patched branch, thus producing
patch files in the usual way. The alternative would be to make a combined
patch fixing all issues in one file, but this seems to have no real
benefits and plenty of downsides.
Release team: would you be happy with an update in stable along the lines
I've outlined?
Niko et al: any further comments?
Cheers,
Dominic.
functional
fddbd7860397641a9f336211b07bd51902a70e55 [perl #123652] eval {label:} crash
d40f1ca59e9f4eb4e0e717b5304072636b24a62a lib/perl5db.pl: Restore noop lock
prototype
4db4d6727189105b033a1a4be009711535cd7407 [perl #124127] fix cloning arrays with
unused elements
da902b590037b6f0b7e95937c761b16043c47aa6 [perl #123218] "preserve" $/ if set to
a bad value
cde1108b596cf23b590a273e678a0a597817ad5b Remove get-magic from $/
0f19268d11e0e7ce38b5a449f9f53461a0dc3226 [perl #123748] - Add test case for
possible getenv/putenv/setenv stomping in perl.c (also squash
63209b393029691eb62065536b4aaab4ade1ad7b into it)
6eeae11f5e975d33c2d782454962ef5d061523cf locale.c: savepv() of getenv()
(https://rt.perl.org/Public/Bug/Display.html?id=123748)
ca9cf5171a638ccfefa8b2f842df019aec532fd2 perl.c: Don't read possibly zapped
memory (https://rt.perl.org/Ticket/Display.html?id=123748)
56ebbae5753a92e86450b6fb16c0ab7838cbfbcb [perl #123202] speed up scalar //g
against tainted strings
0b45ede02cc1dea0a409d6f0db7047f8a06b3aeb Stop $^H |= 0x1c020000 from enabling
all features
d427d11537d9540fa9903b39c59e5087ca300a6a [perl #124113] Make check for
multi-dimensional arrays be UTF8-aware
d199fb6107ca19bfaef0d7453cc008fbc66f694b Allow unquoted UTF-8 HERE-document
terminators
95ea1ad55268965975d1d4fe77493cdb40721923 Fix "...without parentheses is
ambuguous" warning for UTF-8 function names
d29597bcd1c03171d1dba1efd922c0e6fb52cf23 Fix test count in t/base/rs.t
23a85f4c1fe2393067c066cbd442e4c1256e97cd hv_func.h - fix seed initialization in
sdbm and djb2 hashing algorithms.
8d89c0509dd5eb1de58dc6617f6e08599eb24792 [PATCH] [perl #123786] don't leak the
temp utf8 copy of namep
17d9707d444517764c7bcb479c236a8c58a1d605 save_re_context(): do "local $n" with
no PL_curpm (#820328)
ccafce1bfd59cdbdd7af0ad68f7557a7471d6c64 Perl_save_re_context(): re-indent
after last commit
160ab6277bff26ab3f7c18d710271ef2775d542e h2ph: correct handling of hex
constants for the preamble
0cb29f21ba1db04416bb1a2dbc32cd5f7c75bc84 lib/h2ph.t to test generated
t/_h2ph_pre.ph instead of the system one
e05b470016a652da7cc2d059fb464dea98571f3b simpify and speed up /.*.../ handling
b9d0b7b01399df7c7155d1ac249e0ec52a2f0cc0 [perl #123711] Fix crash with 0-5x-l{0}
ab4bc882871ec70a332518a556f2ad8bdccfce25 don't fatalize warnings during
unwinding (#123398)
775d07fe1f24ba72a76298bbcaa0c737c37c0246 Don’t treat setpgrp($nonzero) as
setpgrp(1)
36ee76c8e66553bd0b422691ad9ca13a229035b5 RT #124156: death during unwinding
causes crash
913281cacd3442109f345cc20d38e78a36470f94 [perl #125541] Fix crash with %::=();
J->${\"::"}
aeb325e6e832467c38c4baff1ee68c7726ad9f7c PATCH: [perl 125825] {n}+ possessive
quantifier broken
89d3bf64c47772a0c299cec5555c07c208dd1fbf [perl #123712] Fix /$a[/ parsing
feac78b0722d4899f9a306d5fb427fe33e82b9ab [perl #123712] Don’t check sub_inwhat
45f3f24684363c03c905ddeea6353a16213e34e8 [perl #123893] Fix hang with "@{"
docs
3f48d410f19f301f9e0a9143b6c4763d583e67a9 Fix apidocs for OP_TYPE_IS(_OR_WAS) -
arguments separated by |, not ,.
7ee5afc746607e1b7fce7934f2b9a27ce300ba4f perlpodspec: Corrections/adds to
detecting =encoding
a82de63beda206f04be7b7c8573c2cef05ea397d SvPV_set's docs, it really shouldn't
be public API
41575f0a39566008526e7e38eab84cba82cf372b Add pthread to libswanted
367311751a60f47b35f98115eeb127aa686941c7 Fix warning message regarding "use
autodie" and "use open".
df9f260937c1154d6b1c9d383c0407f73f4a1454 perlunicook: Note that autodie >= 2.26
should be okay with "use open".
c31a12f296d6bdd20ef930863aeda2925b33ae39 Fix setenv() replacement documentation
in perlclib
0b0320eef35c38a33abf41e9d1dcfdf7f7f9af55 perlhacktips: Add caution about clib
ptr returns to static memory
4179008484da541dbe67e0a17845ecd8deb7e943 Fix minor code typos in perlunicook
bb1d1705ec909f3549d7889cecf080a284c16aaa [perl #122322] Update OOK example in
perlguts
5c20190d12750fee5a8b0a70590bfbae59ee68d3 perlfunc: mention that study() is
currently a noop
--- End Message ---
--- Begin Message ---
Source: perl
Source-Version: 5.20.2-3+deb8u5
We believe that the bug you reported is fixed in the latest version of
perl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dominic Hargreaves <[email protected]> (supplier of updated perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 23 May 2016 23:42:11 +0100
Source: perl
Binary: perl-base perl-doc perl-debug libperl5.20 libperl-dev perl-modules perl
Architecture: all amd64 source
Version: 5.20.2-3+deb8u5
Distribution: jessie
Urgency: medium
Maintainer: Niko Tyni <[email protected]>
Changed-By: Dominic Hargreaves <[email protected]>
Closes: 816280 820328 821848 822336
Description:
libperl5.20 - shared Perl library
libperl-dev - Perl library: development files
perl-base - minimal Perl system
perl-debug - debug-enabled Perl interpreter
perl-doc - Perl documentation
perl - Larry Wall's Practical Extraction and Report Language
perl-modules - Core Perl modules
Changes:
perl (5.20.2-3+deb8u5) jessie; urgency=medium
.
* Apply patch from Niko Tyni fixing debugperl crashes with XS
modules (Closes: #816280)
* [SECURITY] CVE-2015-8853 fix regexp engine hang on illegal UTF8
input (Closes: #821848)
* Fix UTF8-related regexp engine crash (Closes: #820328)
* Apply selected bug-fix patches taken from 5.20.3 (Closes: #822336)
- /usr/share/doc/perl/perldebdelta.pod describes the changes in
more detail
Checksums-Sha1:
9d50d05e55e45b5d5f7afb818f103303eb5a47be 2324 perl_5.20.2-3+deb8u5.dsc
95c3897926c6d37496e4f077de6fa50a97743d2a 136136
perl_5.20.2-3+deb8u5.debian.tar.xz
23f211abbe4fba24a21c7a9563c091938206d504 7345772
perl-doc_5.20.2-3+deb8u5_all.deb
c2452ccf992c8e0c1bac96b271ed2ed9720cb3bd 2545644
perl-modules_5.20.2-3+deb8u5_all.deb
cadad1f8472d61d38c056cc92e64cb773138ce57 1225242
perl-base_5.20.2-3+deb8u5_amd64.deb
d76a52c5620bc163342e9b4638b5735a4f7f9bcc 4488112
perl-debug_5.20.2-3+deb8u5_amd64.deb
4e58a16e69b02a18d9ea59bac6035503b522e9f1 1354
libperl5.20_5.20.2-3+deb8u5_amd64.deb
1fedfe49f39638bc3de35c0783c4cfaabf5a036d 2153264
libperl-dev_5.20.2-3+deb8u5_amd64.deb
d20adbbe8fcc7d22fd36d7eb868c1e8a84efc3e3 2654668 perl_5.20.2-3+deb8u5_amd64.deb
Checksums-Sha256:
b9d022b6e58d3d856bfb37afb3af0c840c561ba42483bfd31eae22edc6651f3a 2324
perl_5.20.2-3+deb8u5.dsc
5185ab1a87cd71c751a822f366c5483ae286e2f371966b5cfed2d5cc05f0de9b 136136
perl_5.20.2-3+deb8u5.debian.tar.xz
210e41fa8fd1dcfe9fb4c9fe4c7c754b17ebe2e9ecbbbc0d5afd6e74309fb164 7345772
perl-doc_5.20.2-3+deb8u5_all.deb
e757a89f1e81eda9cf2a70972aa33f611c5fb26bffa892b63dd638f4e19e2529 2545644
perl-modules_5.20.2-3+deb8u5_all.deb
a10626902eb8f32a6ca1c6995be8f1e041dbc2d29856ce4690f24a7e0a3401f7 1225242
perl-base_5.20.2-3+deb8u5_amd64.deb
989bd11fbcfe2d331db6c192fd17637ecb6251b3e6eddd1b5f689bd4be4552c5 4488112
perl-debug_5.20.2-3+deb8u5_amd64.deb
33db77bb341c9928da728dd99ba73a8d79f381caaa2d574593a4933fe6c56e83 1354
libperl5.20_5.20.2-3+deb8u5_amd64.deb
a3213069b1f0fc0443d4e5e819f61d5577d1842ccda4f43ca279c0a607abb980 2153264
libperl-dev_5.20.2-3+deb8u5_amd64.deb
b60d918cbdfe7a77e5ea8d39a2dc235205a595c2050843a196e0a6f1afccf8da 2654668
perl_5.20.2-3+deb8u5_amd64.deb
Files:
215405d22f5f1144623dd7281b7c96fe 2324 perl standard perl_5.20.2-3+deb8u5.dsc
b2d6222f7b689a7e6c8b24d73525ef16 136136 perl standard
perl_5.20.2-3+deb8u5.debian.tar.xz
6dd9eacac34ca6820a5d510600beb1e5 7345772 doc optional
perl-doc_5.20.2-3+deb8u5_all.deb
c4658cbcdb6b649ae2799783a0760b2d 2545644 perl standard
perl-modules_5.20.2-3+deb8u5_all.deb
e9b8bf98060b532194bcdf62b2fdc503 1225242 perl required
perl-base_5.20.2-3+deb8u5_amd64.deb
991d5eb6651300991fa93d210d8419ec 4488112 debug extra
perl-debug_5.20.2-3+deb8u5_amd64.deb
d0c219d9d596655492d0a78b96fef792 1354 libs optional
libperl5.20_5.20.2-3+deb8u5_amd64.deb
13e31e002a9b0a66e890503b058f7472 2153264 libdevel optional
libperl-dev_5.20.2-3+deb8u5_amd64.deb
f5dcdd3ce3945d74e4b1312100d5d912 2654668 perl standard
perl_5.20.2-3+deb8u5_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=QH8F
-----END PGP SIGNATURE-----
--- End Message ---
