<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Rehashing flaw &#8211; updates available</title>
	<atom:link href="http://perlnews.org/2013/03/rehashing-flaw/feed/" rel="self" type="application/rss+xml" />
	<link>http://perlnews.org/2013/03/rehashing-flaw/</link>
	<description>The Perl news site</description>
	<lastBuildDate>Wed, 20 Mar 2013 19:20:35 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: Dave Cross</title>
		<link>http://perlnews.org/2013/03/rehashing-flaw/#comment-2046</link>
		<dc:creator>Dave Cross</dc:creator>
		<pubDate>Wed, 20 Mar 2013 19:20:35 +0000</pubDate>
		<guid isPermaLink="false">http://perlnews.org/?p=1838#comment-2046</guid>
		<description><![CDATA[Xinhuan,

The story says:

&lt;blockquote&gt;perl 5.14.4 and 5.16.3 will be released soon, including these fixes. There is no plan to make a new release of any other version&lt;/blockquote&gt;

So, no, is the answer to your question.

For more details see the section on Support and Maintenance in &lt;a href=&quot;http://perldoc.perl.org/perlpolicy.html&quot; rel=&quot;nofollow&quot;&gt;perldoc perlpolicy&lt;/a&gt;. It says:

&lt;blockquote&gt;We &quot;officially&quot; support the two most recent stable release series. 5.12.x and earlier are now out of support. As of the release of 5.18.0, we will &quot;officially&quot; end support for Perl 5.14.x, other than providing security updates as described below.&lt;/blockquote&gt;

So Perl 5.8.3 is well outside its window of support. The same document also says:

&lt;blockquote&gt;To the best of our ability, we will provide &quot;critical&quot; security patches / releases for any major version of Perl whose 5.x.0 release was within the past three years. We can only commit to providing these for the most recent .y release in any 5.x.y series.&lt;/blockquote&gt;

I&#039;m pretty sure that this fix qualifies as a critical security patch. However version 5.8.3 falls outside of even this policy for two reasons. Firstly because 5.8.0 was not released in the last three years (it was released in 2002) and secondly because 5.8.3 is not the most recent release in the 5.8.x series (that was 5.8.9).

So, no, you really can&#039;t expect to see a patched release from the Perl 5 Porters. As I see it, you have three options.

1/ Contact your vendor and ask them for a patched version.
2/ Build your own new version from the &lt;a href=&quot;http://perl5.git.perl.org/perl.git/shortlog/refs/heads/maint-5.8&quot; rel=&quot;nofollow&quot;&gt;maint-5.8&lt;/a&gt; branch. But note that this will almost certainly be a patched version of 5.8.9.
3/ Accept that you&#039;ve made a bit of blunder by letting your version of Perl get so out of date and use this as a reason to update to a supported version of Perl]]></description>
		<content:encoded><![CDATA[<p>Xinhuan,</p>
<p>The story says:</p>
<blockquote><p>perl 5.14.4 and 5.16.3 will be released soon, including these fixes. There is no plan to make a new release of any other version</p></blockquote>
<p>So, no, is the answer to your question.</p>
<p>For more details see the section on Support and Maintenance in <a href="http://perldoc.perl.org/perlpolicy.html" rel="nofollow">perldoc perlpolicy</a>. It says:</p>
<blockquote><p>We &#8220;officially&#8221; support the two most recent stable release series. 5.12.x and earlier are now out of support. As of the release of 5.18.0, we will &#8220;officially&#8221; end support for Perl 5.14.x, other than providing security updates as described below.</p></blockquote>
<p>So Perl 5.8.3 is well outside its window of support. The same document also says:</p>
<blockquote><p>To the best of our ability, we will provide &#8220;critical&#8221; security patches / releases for any major version of Perl whose 5.x.0 release was within the past three years. We can only commit to providing these for the most recent .y release in any 5.x.y series.</p></blockquote>
<p>I&#8217;m pretty sure that this fix qualifies as a critical security patch. However version 5.8.3 falls outside of even this policy for two reasons. Firstly because 5.8.0 was not released in the last three years (it was released in 2002) and secondly because 5.8.3 is not the most recent release in the 5.8.x series (that was 5.8.9).</p>
<p>So, no, you really can&#8217;t expect to see a patched release from the Perl 5 Porters. As I see it, you have three options.</p>
<p>1/ Contact your vendor and ask them for a patched version.<br />
2/ Build your own new version from the <a href="http://perl5.git.perl.org/perl.git/shortlog/refs/heads/maint-5.8" rel="nofollow">maint-5.8</a> branch. But note that this will almost certainly be a patched version of 5.8.9.<br />
3/ Accept that you&#8217;ve made a bit of blunder by letting your version of Perl get so out of date and use this as a reason to update to a supported version of Perl</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Xinhuan Zheng</title>
		<link>http://perlnews.org/2013/03/rehashing-flaw/#comment-2043</link>
		<dc:creator>Xinhuan Zheng</dc:creator>
		<pubDate>Wed, 20 Mar 2013 19:02:16 +0000</pubDate>
		<guid isPermaLink="false">http://perlnews.org/?p=1838#comment-2043</guid>
		<description><![CDATA[We use perl 5.8.3 throughout our environment. Do you have rehashing flaw updates to that release number?]]></description>
		<content:encoded><![CDATA[<p>We use perl 5.8.3 throughout our environment. Do you have rehashing flaw updates to that release number?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Strawberry Perl (for Windows) 5.16.3.1 + 5.14.4.1 released &#187; Perl News</title>
		<link>http://perlnews.org/2013/03/rehashing-flaw/#comment-1447</link>
		<dc:creator>Strawberry Perl (for Windows) 5.16.3.1 + 5.14.4.1 released &#187; Perl News</dc:creator>
		<pubDate>Wed, 13 Mar 2013 12:04:39 +0000</pubDate>
		<guid isPermaLink="false">http://perlnews.org/?p=1838#comment-1447</guid>
		<description><![CDATA[[...] It is recommend that you upgrade as these address the recent rehashing flaw. [...]]]></description>
		<content:encoded><![CDATA[<p>[...] It is recommend that you upgrade as these address the recent rehashing flaw. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Perl 5.16.3 and 5.14.4 just released &#187; Perl News</title>
		<link>http://perlnews.org/2013/03/rehashing-flaw/#comment-1437</link>
		<dc:creator>Perl 5.16.3 and 5.14.4 just released &#187; Perl News</dc:creator>
		<pubDate>Mon, 11 Mar 2013 21:48:32 +0000</pubDate>
		<guid isPermaLink="false">http://perlnews.org/?p=1838#comment-1437</guid>
		<description><![CDATA[[...] 5.16.3 has just been released including the fix for the Rehashing flaw and is a recommended update for all 5.16 [...]]]></description>
		<content:encoded><![CDATA[<p>[...] 5.16.3 has just been released including the fix for the Rehashing flaw and is a recommended update for all 5.16 [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Dynamic page generated in 0.354 seconds. -->
<!-- Cached page generated by WP-Super-Cache on 2013-06-06 07:19:29 -->
