[Midnightbsd-cvs] [MidnightBSD/mports] 4877b0: lang/perl5.42: update to 5.42.3 (security)

Lucas Holt noreply at github.com
Sun Aug 16 14:55:55 EDT 2026


  Branch: refs/heads/lang/perl5.42
  Home:   https://github.com/MidnightBSD/mports
  Commit: 4877b0f9e3a033003213c5bb9120d3e6ac1da128
      https://github.com/MidnightBSD/mports/commit/4877b0f9e3a033003213c5bb9120d3e6ac1da128
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-16 (Sun, 16 Aug 2026)

  Changed paths:
    M lang/perl5.42/distinfo
    M lang/perl5.42/pkg-plist
    M lang/perl5.42/version.mk

  Log Message:
  -----------
  lang/perl5.42: update to 5.42.3 (security)

Fixes three CVEs in the regex engine and pack/unpack:

  CVE-2026-8376  - buffer overflow in Perl_study_chunk
  CVE-2026-57432 - buffer overflow in S_measure_struct
  CVE-2026-13221 - regex trie 16-bit field overflow

pkg-plist gains the perl5423delta pod/man pages, plus perl5404delta
which was missing from the previous update.

No PORTREVISION bump for dependent ports: libperl's SONAME is
libperl.so.5.42 (branch only), so a patch level bump is ABI neutral.

AI-Assisted-by: Claude Opus 5 (1M context) <noreply at anthropic.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications


More information about the Midnightbsd-cvs mailing list