On Mon, Jun 15, 2020 at 08:46:03PM +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Thu, 2020-06-04 at 22:02 +0100, Dominic Hargreaves wrote: > > Upstream released fixes for three regexp-related security issues > > on Monday: > > > > https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod > > > > The Debian security team would like these as no-dsa, so we would like > > to provide them in a point release. The patches have been trivially > > backported from 5.28. See #962005. > > > > Please go ahead.
Hi Adam Sorry to add another perl release complication - we just had a bid made on #900739 for another patch to be included in the update in stretch: https://github.com/Perl/perl5/commit/fa2e45943e2b6ce22cf70dba5b47afe73c8c7c80 This was included in perl 5.28 and has been tested (I believe) in 5.24. Cheers Dominic
