Re: [ANNOUNCEMENT] Updated: perl-5.22.1-2

2016-03-09 Thread Achim Gratz
Tony Cook writes: > Does this refer to the CVE-2015-8607 and CVE-2016-2381 fixes? Yes. > The second is a bit more complex than losing taint. I was trying to not overcomplicate things, maybe unsuccessfully. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Re: [ANNOUNCEMENT] Updated: perl-5.22.1-2

2016-03-09 Thread Tony Cook
On Wed, Mar 09, 2016 at 11:46:39PM +0100, Achim Gratz wrote: > > A new release of Perl version 5.22.1 is available, which fixes two cases > of losing taint. Immediate update is recommended if either the > environment or the input to any Perl program can be controlled by an > untrusted party. Doe

[ANNOUNCEMENT] Updated: perl-5.22.1-2

2016-03-09 Thread Achim Gratz
A new release of Perl version 5.22.1 is available, which fixes two cases of losing taint. Immediate update is recommended if either the environment or the input to any Perl program can be controlled by an untrusted party. -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to