mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-10 08:14:09 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/perl: security bump to version 5.40.4

Browse Source 
fix CVE 2026-4176 : contains a vulnerable version of Compress::Raw::Zlib

For release notes, see:
https://perldoc.perl.org/5.40.4/perl5404delta

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Francois Perrad
2026-03-31 10:37:22 +02:00
committed by Thomas Perale
parent a063cf3843
commit e3d10db814
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
package/perl/perl.hash
View File

@@ -1,12 +1,12 @@
# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.3.tar.xz.{md5,sha1,sha256}.txt
md5 f526a5975a7cc6f53f28326437b1eb39 perl-5.40.3.tar.xz
sha1 7c95250ceff00d649c1f5afa511987a2c4da61d3 perl-5.40.3.tar.xz
sha256 65f63b4763ab6cb9bb3d5731dd10369e1705be3c59be9847d453eb60b349ab43 perl-5.40.3.tar.xz
# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.4.tar.xz.{md5,sha1,sha256}.txt
md5 2e83cf578d5044444eb9e445f58cf36f perl-5.40.4.tar.xz
sha1 85790a2f35446a9dca6749a563117a36bf381a2e perl-5.40.4.tar.xz
sha256 eb0b1116b84ded552f686c9ee40c83000d8388c454f54197ca1d3a3b17246bd3 perl-5.40.4.tar.xz
# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.3/perl-cross-1.6.3.hash
sha256 cd57d8f8017727dc7e19cca55e1e9f22664edecf6c9f04c3515ecc13fd88e4f3 perl-cross-1.6.3.tar.gz
# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.4/perl-cross-1.6.4.hash
sha256 b6202173b0a8a43fb312867d85a8cd33527f3f234b1b6e591cdaa9895c9920c7 perl-cross-1.6.4.tar.gz
# Locally calculated
sha256 dd90d4f42e4dcadf5a7c09eea0189d93c7b37ae560c91f0f6d5233ed3b9292a2 Artistic
sha256 d77d235e41d54594865151f4751e835c5a82322b0e87ace266567c3391a4b912 Copying
sha256 af805523b88a8ebb60afc009caaf247a498208502f7b8b3d9d3e329fcfb1dc3b README
sha256 52bbfb0dbdd5301ab21cc43d0b1d649189eaa3c0caad60a0798657b8c011ab0e README

6
package/perl/perl.mk
View File

@@ -6,7 +6,7 @@
# When updating the version here, also update utils/scancpan
PERL_VERSION_MAJOR = 40
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).3
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).4
PERL_SITE = https://www.cpan.org/src/5.0
PERL_SOURCE = perl-$(PERL_VERSION).tar.xz
PERL_LICENSE = Artistic or GPL-1.0+
@@ -15,7 +15,7 @@ PERL_CPE_ID_VENDOR = perl
PERL_DEPENDENCIES = $(TARGET_NLS_DEPENDENCIES)
PERL_INSTALL_STAGING = YES
PERL_CROSS_VERSION = 1.6.3
PERL_CROSS_VERSION = 1.6.4
# DO NOT refactor with the github helper (the result is not the same)
PERL_CROSS_SITE = https://github.com/arsv/perl-cross/releases/download/$(PERL_CROSS_VERSION)
PERL_CROSS_SOURCE = perl-cross-$(PERL_CROSS_VERSION).tar.gz
@@ -28,7 +28,7 @@ PERL_EXTRA_DOWNLOADS = $(PERL_CROSS_SITE)/$(PERL_CROSS_SOURCE)
define PERL_CROSS_EXTRACT
$(call suitable-extractor,$(PERL_CROSS_SOURCE)) $(PERL_DL_DIR)/$(PERL_CROSS_SOURCE) | \
$(TAR) --strip-components=1 -C $(@D) $(TAR_OPTIONS) -
mv $(@D)/cnf/diffs/perl5-5.40.2 $(@D)/cnf/diffs/perl5-5.40.3
mv $(@D)/cnf/diffs/perl5-5.40.3 $(@D)/cnf/diffs/perl5-5.40.4
endef
PERL_POST_EXTRACT_HOOKS += PERL_CROSS_EXTRACT