mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-27 04:20:38 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/perl: security bump to version 5.40.5

Browse Source 
fix CVE-2026-8376 - Buffer overflow in Perl_study_chunk
fix CVE-2026-57432 - Buffer overflow in S_measure_struct
fix CVE-2026-13221 - Regex trie 16-bit field overflow

For release notes, see:
https://perldoc.perl.org/5.40.5/perl5405delta

Signed-off-by: Francois Perrad <francois.perrad.86@gmail.com>
(alternative to commit e3ff7a6f02)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
This commit is contained in:
Francois Perrad
2026-08-03 10:19:51 +02:00
committed by Titouan Christophe
parent ac53be9a4d
commit e3ee4c8e84
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
package/perl/perl.hash
View File

@@ -1,7 +1,7 @@
# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.4.tar.xz.{md5,sha1,sha256}.txt
md5 2e83cf578d5044444eb9e445f58cf36f perl-5.40.4.tar.xz
sha1 85790a2f35446a9dca6749a563117a36bf381a2e perl-5.40.4.tar.xz
sha256 eb0b1116b84ded552f686c9ee40c83000d8388c454f54197ca1d3a3b17246bd3 perl-5.40.4.tar.xz
# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.5.tar.xz.{md5,sha1,sha256}.txt
md5 980490b3ff28a22631436d29bca365bc perl-5.40.5.tar.xz
sha1 6a6fbf5e474db635670b02c59841a5280669392f perl-5.40.5.tar.xz
sha256 1fe6f825b487d26c35aa51a35f52fe494d4cfc77b8051f8b1ee3391bf0289bc6 perl-5.40.5.tar.xz
# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.4/perl-cross-1.6.4.hash
sha256 b6202173b0a8a43fb312867d85a8cd33527f3f234b1b6e591cdaa9895c9920c7 perl-cross-1.6.4.tar.gz

4
package/perl/perl.mk
View File

@@ -6,7 +6,7 @@
# When updating the version here, also update utils/scancpan
PERL_VERSION_MAJOR = 40
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).4
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).5
PERL_SITE = https://www.cpan.org/src/5.0
PERL_SOURCE = perl-$(PERL_VERSION).tar.xz
PERL_LICENSE = Artistic or GPL-1.0+
@@ -28,7 +28,7 @@ PERL_EXTRA_DOWNLOADS = $(PERL_CROSS_SITE)/$(PERL_CROSS_SOURCE)
define PERL_CROSS_EXTRACT
$(call suitable-extractor,$(PERL_CROSS_SOURCE)) $(PERL_DL_DIR)/$(PERL_CROSS_SOURCE) | \
$(TAR) --strip-components=1 -C $(@D) $(TAR_OPTIONS) -
mv $(@D)/cnf/diffs/perl5-5.40.3 $(@D)/cnf/diffs/perl5-5.40.4
mv $(@D)/cnf/diffs/perl5-5.40.3 $(@D)/cnf/diffs/perl5-5.40.5
endef
PERL_POST_EXTRACT_HOOKS += PERL_CROSS_EXTRACT