Debian DSA-2265-1 : perl - lack of tainted flag propagation

Mark Martinec discovered that Perl incorrectly clears the tainted flag on values returned by case conversion functions such as 'lc'. This may expose preexisting vulnerabilities in applications which use these functions while processing untrusted input. No such applications are known at this stage...

[SECURITY] [DSA 2265-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2265-1 [email protected] http://www.debian.org/security/ Florian Weimer June 20, 2011 http://www.debian.org/security/faq -...