File _patchinfo of Package patchinfo
<patchinfo incident="perl"> <packager>lijews</packager> <issue tracker="cve" id="CVE-2012-5526"></issue> <issue tracker="cve" id="CVE-2013-1667"></issue> <issue tracker="cve" id="CVE-2012-6329"></issue> <issue tracker="bnc" id="789994">VUL-1: CVE-2012-5526: perl: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers</issue> <issue tracker="bnc" id="797060">VUL-1: perl: CVE-2012-6329: missing input sanitation</issue> <issue tracker="bnc" id="804415">VUL-0: CVE-2013-1667: perl: Denial of Service (CPU consumption) via specially-crafted, user-supplied hash keys</issue> <category>security</category> <rating>important</rating> <summary>update for perl</summary> <description>Perl was updated to fix 3 security issues: - fix rehash denial of service (compute time) [bnc#804415] [CVE-2013-1667] - improve CGI crlf escaping [bnc#789994] [CVE-2012-5526] - sanitize input in Maketext.pm to avoid code injection [bnc#797060] [CVE-2012-6329]</description> </patchinfo>