summaryrefslogtreecommitdiffstats
path: root/gnu/usr.bin/perl/patchlevel.h (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Fix merge issues, remove excess files - match perl-5.32.1 distafresh12021-03-011-3/+3
| | | | OK sthen@
* Sync to perl 5.30.3afresh12020-06-041-1/+1
| | | | | All functional changes were committed already, this updates the version number, Module::Corelist, and documentation.
* Update perl to 5.30.2afresh12020-04-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | https://metacpan.org/pod/release/SHAY/perl-5.30.2/pod/perldelta.pod Incompatible Changes There are no changes intentionally incompatible with 5.30.0. Updated Modules and Pragmata * Compress::Raw::Bzip2 has been upgraded from version 2.084 to 2.089. * Module::CoreList has been upgraded from version 5.20191110 to 5.20200314. Selected Bug Fixes * printf() or sprintf() with the %n format no longer cause a panic on debugging builds, or report an incorrectly cached length value when producing SVfUTF8 flagged strings. * A memory leak in regular expression patterns has been fixed. * A read beyond buffer in grok_infnan has been fixed. * An assertion failure in the regular expression engine has been fixed. * (?{...}) eval groups in regular expressions no longer unintentionally trigger "EVAL without pos change exceeded limit in regex". Proceed when you feel comfortable. deraadt@
* Fix merge issues, remove excess files - match perl-5.30.1 distafresh12019-12-301-3/+3
| | | | Timing is good deraadt@, OK sthen@
* Update to perl 5.28.2afresh12019-05-241-1/+1
| | | | | | | Minor bugfixes and documentation improvments. See perldelta for details. https://metacpan.org/pod/release/SHAY/perl-5.28.2/pod/perldelta.pod OK bluhm@
* Fix merge issues, remove excess files - match perl-5.28.1 distafresh12019-02-131-5/+5
| | | | looking good sthen@, Great! bluhm@
* Fix merge issues, remove excess files - match perl-5.24.3 distafresh12017-10-291-1/+1
| | | | ok bluhm@
* Fix merge issues, remove excess files - match perl-5.24.2 distafresh12017-08-141-1/+1
| | | | OK bluhm@, Reads ok sthen@
* Fix merge issues, remove excess files - match perl-5.24.1 distafresh12017-02-051-6/+3
|
* Patch perl CVE-2016-1238afresh12016-07-251-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The problem relates to Perl 5 ("perl") loading modules from the includes directory array ("@INC") in which the last element is the current directory ("."). That means that, when "perl" wants to load a module (during first compilation or during lazy loading of a module in run-time), perl will look for the module in the current directory at the end, since '.' is the last include directory in its array of include directories to seek. The issue is with requiring libraries that are in "." but are not otherwise installed. The major problem with this behavior is that it unexpectedly puts a user at risk whenever they execute any Perl scripts from a directory that is writable by other accounts on the system. For instance, if a user is logged in as root and changes directory into /tmp or an account's home directory, it is possible to now run any shell commands that are written in C, Python or Ruby without fear. The same isn't true for any shell commands that are written in Perl, since a significant proportion of Perl scripts will execute code in the current working directory whenever they are run. For example, if a user on a shared system creates the file /tmp/Pod/Perldoc/Toterm.pm, and then I log in as root, change directory to /tmp, and run "perldoc perlrun", it will execute the code they have placed in the file. ok deraadt@
* The XSLoader issue has been assigned CVE-2016-6185millert2016-07-081-0/+1
|
* Update to perl 5.20.3afresh12016-07-031-1/+1
| | | | OK bluhm@
* Add entry for CVE-2015-8853 patch.millert2016-04-221-0/+1
|
* Fix merge issues, remove excess files - match perl-5.20.2 distafresh12015-04-251-2/+1
|
* Apply local patches to perl-5.20.1afresh12014-11-171-0/+1
| | | | ok deraadt@ sthen@ espie@ miod@
* Fix merge conflicts, remove extra files, match upstream perl-5.20.1afresh12014-11-171-6/+4
| | | | ok deraadt@ sthen@ espie@ miod@
* Fix a possibly infinite recursion in Perl Data::Dumper.bluhm2014-10-261-0/+1
| | | | | | | | | | | | | | Derived from Perl git commit http://perl5.git.perl.org/perl.git 19be3be6968e2337bcdfe480693fff795ecd1304 Add a configuration variable/option to limit recursion when dumping deep data structures. Defaults the limit to 1000, which can be reduced or increase, or eliminated by setting it to 0. This patch addresses CVE-2014-4330. This bug was found and reported by: LSE Leading Security Experts GmbH employee Markus Vervier. From Maximilian Pascher; OK schwarze@ afresh1@
* update libnet to 1.27; various bugfixes and improvements:jasper2014-09-051-1/+1
| | | | | | http://cpansearch.perl.org/src/SHAY/libnet-1.27/Changes ok millert@
* apply fix from upstream to remedy RT 37700, which hardens the close() functionjasper2014-09-011-0/+1
| | | | ok millert@
* Merge perl-5.18.2 plus local patches, remove old filesafresh12014-03-241-3/+3
| | | | OK espie@ sthen@ deraadt@
* merge/resolve conflictssthen2013-03-251-19/+15
| | | | (some more to do after this one)
* Apply patch from RedHat to address CVE-2013-1667, perl: DoS in rehashing codejasper2013-03-061-0/+1
| | | | | | For more information please refer to: http://code.activestate.com/lists/perl5-porters/191311/ ok millert@
* Fix for CVE-2012-6329; from perl git via Sebastian Trahmmillert2013-02-081-0/+1
|
* Fix for CVE-2012-5195; ok miod@millert2012-10-261-0/+1
|
* Security fix for CVE-2011-2939, Perl decode_xs heap-based buffer overflow.jasper2011-11-011-0/+1
| | | | ok espie@ millert@
* Update Digest module to 1.17 (security fix).rpointel2011-10-111-0/+1
| | | | | Thanks Emeric Boit for reporting me this. ok millert@ espie@
* Perl security fix for CVE-2011-1487:bluhm2011-04-181-0/+1
| | | | | | | | | | ucfirst(), uc() and lc() forget to set the tainted flag if input was marked as tainted. http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 http://perl5.git.perl.org/perl.git/commitdiff/539689e74a3bcb04d29e4cd9396de91a81045b99 ok millert@
* Update Test::Simple to 0.98jasper2011-04-181-1/+1
| | | | ok millert@
* - update List::Util to 1.23, as needed by newer p5-POEjasper2011-04-181-0/+1
| | | | | tested in bulk build. ok millert@
* - Update Test::Simple to 0.96jasper2011-01-071-0/+1
| | | | | from Abel Abraham Camarillo Ojeda ok espie@ millert@
* Update CGI to 3.51, which includes a better fix for SA42443,millert2011-01-061-1/+1
| | | | "multipart_init()" HTTP Header Injection Vulnerability.
* - update CGI to 3.50, which includes a fix for SA42443,jasper2010-12-061-0/+1
| | | | | | | "multipart_init()" HTTP Header Injection Vulnerability. - add a mention in patchlevel.h (reminded by millert@) ok millert@
* Add CVE-2010-0405 to list of local patches.millert2010-09-251-0/+1
|
* merge in perl 5.12.2 plus local changesmillert2010-09-241-6/+6
|
* Merge in perl 5.10.1millert2009-10-121-3/+16
|
* fix conflicts and merge in local changes to perl 5.10.0millert2008-09-291-10/+7
|
* merge in perl 5.8.8millert2006-03-281-5/+4
|
* The official fix for the Perl sprintf buffer overflow.brad2006-01-021-0/+1
| | | | ok millert@
* Limit PERLIO_DEBUG environtment variable to a sane length and just ignoremillert2005-02-021-0/+1
| | | | it if setuid. Found by Kevin Finisterre, fix from perl developers.
* sync in-tree perl with 5.8.6millert2005-01-151-2/+2
|
* merge 5.8.5 into HEADmillert2004-08-091-2/+2
| | | | | | | remove now-unused files crank libperl shared library major number update Makefile.bsd-wrapper tweak openbsd hints file for arm and m68k
* merge local changes into perl-5.8.3millert2004-04-071-1/+1
|
* Resolve conflicts for perl 5.8.2, remove old files, and add OpenBSD-specific scaffoldingmillert2003-12-031-5/+48
|
* Resolve conflicts, remove old files, merge local changesmillert2002-10-271-4/+13
|
* merge in perl 5.6.1 with our local changesmillert2001-05-241-4/+2
|
* Change 6214 by gsar@auger on 2000/06/08 13:57:54millert2001-02-071-0/+1
| | | | | | @_ can't have junk in it even in the non-USE_ITHREADS case because caller() wants to populate @DB::args with it (causes a coredump in Carp::confess())
* The official perl fix deletes the /bin/mail code entirely.millert2000-08-081-1/+2
|
* perl-5.6.0 + local changesmillert2000-04-061-4/+37
|
* perl5.005_03 (stock)millert1999-04-291-5/+9
|
* perl 5.004_04millert1997-11-301-5/+7
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.