f39dcf685b
what is new for perl v5.28.1: Security [CVE-2018-18311] Integer overflow leading to buffer overflow and segmentation fault Integer arithmetic in "Perl_my_setenv()" could wrap when the combined length of the environment variable name and value exceeded around 0x7fffffff. This could lead to writing beyond the end of an allocated buffer with attacker supplied data. [CVE-2018-18312] Heap-buffer-overflow write in S_regatom (regcomp.c) A crafted regular expression could cause heap-buffer-overflow write during compilation, potentially allowing arbitrary code execution. Incompatible Changes There are no changes intentionally incompatible with 5.28.0. If any exist, they are bugs, and we request that you submit a report. See "Reporting Bugs" below. Modules and Pragmata Updated Modules and Pragmata o Module::CoreList has been upgraded from version 5.20180622 to 5.20181129_28. Selected Bug Fixes o Perl 5.28 introduced an "index()" optimization when comparing to -1 (or indirectly, e.g. >= 0). When this optimization was triggered inside a "when" clause it caused a warning ("Argument %s isn't numeric in smart match"). This has now been fixed. o Matching of decimal digits in script runs, introduced in Perl 5.28, had a bug that led to "1\N{THAI DIGIT FIVE}" matching "/^(*sr:\d+)$/" when it should not. This has now been fixed. o The new in-place editing code no longer leaks directory handles. |
||
---|---|---|
.. | ||
files | ||
patches | ||
buildlink3.mk | ||
DESCR | ||
dirs.mk | ||
distinfo | ||
hacks.mk | ||
license.mk | ||
Makefile | ||
Makefile.common | ||
module.mk | ||
options.mk | ||
packlist.mk | ||
PLIST | ||
vars.mk | ||
version.mk |