Subject: Re: [bug#31797] [PATCH] gnu: perl: Fix CVE-2018-12015.

From: [email-masked] (Ludovic Courtès)
Date: Tue, 12 Jun 2018 21:39:51 +0200

Hello Marius,

Marius Bakke <[email-masked]> skribis:

> * gnu/packages/patches/perl-archive-tar-CVE-2018-12015.patch: New file.
> * gnu/local.mk (dist_patch_DATA): Register it.
> * gnu/packages/perl.scm (perl-5.26.2)[source](patches): Use it.

LGTM.  Thanks for taking care of it!

I wonder if it’s an option to remove some of the bundled libraries that
come with Perl, or whether packages rely of them as part of Perl proper.

Ludo’.