perl: update to 5.26.1
authorPhilip Prindeville <[email protected]>
Sun, 24 Sep 2017 23:39:27 +0000 (17:39 -0600)
committerPhilip Prindeville <[email protected]>
Tue, 24 Oct 2017 17:40:34 +0000 (11:40 -0600)
commit4a94479f9652fec59c76e5bc187f9dc08fc8eca7
tree351ac3f65ce78e197f0f2faf379c870ec2ced6be
parent4317fe0a10ddb6a3dfc4b88e42b74546aa8b9f89
perl: update to 5.26.1

Required changes:

* Add qualifying '.' to scripts or to @INC, as appropriate since we're
  enabling default_inc_excludes_dot;

* Add new platform/library definitions like double-double format and
  locale library functions/headers;

* Delete patch 020 as it's been upstreamed;

Optional changes:

* Instead of using -@rm and having that fail, emit an error message,
  and be ignored, just use @rm -f instead which will always succeed.

Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler

Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]

[CVE-2017-12883] Buffer over-read in regular expression parser

For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]

[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows

A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]

Signed-off-by: Philip Prindeville <[email protected]>
16 files changed:
lang/perl/Makefile
lang/perl/files/arm.config
lang/perl/files/armeb.config
lang/perl/files/base.config
lang/perl/files/i486.config
lang/perl/files/mips.config
lang/perl/files/mips64.config
lang/perl/files/mipsel.config
lang/perl/files/powerpc.config
lang/perl/files/version.config
lang/perl/files/x86_64.config
lang/perl/patches/020-host-libc-dir-moved-debian+derivatives.patch [deleted file]
lang/perl/patches/110-always_use_miniperl.patch
lang/perl/patches/900-use-rm-force.patch [new file with mode: 0644]
lang/perl/patches/910-miniperl-needs-inc-dot.patch [new file with mode: 0644]
lang/perl/perlmod.mk