Wow, they move a little slowly, that seems to have been in "candidate for the CVE list" status for a year now.

Note that perl5.6.2 includes the fixed Safe 2.10. (Not sure where they got the 2.0.7 notation from, Safe was at version 2.07 in 5.8.0 and 2.10 in 5.8.1.)