/ 
perl-5.8.4
/ perl573delta
Security Advisories (25)
CVE-2023-47039 (2023-10-30)

Perl for Windows relies on the system path environment variable to find the shell (cmd.exe). When running an executable which uses Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system. However, due to path search order issues, Perl initially looks for cmd.exe in the current working directory. An attacker with limited privileges can exploit this behavior by placing cmd.exe in locations with weak permissions, such as C:\ProgramData. By doing so, when an administrator attempts to use this executable from these compromised locations, arbitrary code can be executed.

CVE-2023-47100

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.

CVE-2020-10878 (2020-06-05)

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

CVE-2018-18311 (2018-12-07)

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVE-2020-10543 (2020-06-05)

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

CVE-2018-6913 (2018-04-17)

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.

CVE-2015-8853 (2016-05-25)

The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 data, as demonstrated by "a\x80."

CVE-2010-1158 (2010-04-20)

Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string.

CVE-2016-2381 (2016-04-08)

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

CVE-2011-1487 (2011-04-11)

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

CVE-2016-1238 (2016-08-02)

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.

CVE-2015-8608 (2017-02-07)

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.

CVE-2011-2728 (2012-12-21)

The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.

CVE-2020-12723 (2020-06-05)

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

CVE-2018-18314 (2018-12-07)

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVE-2018-18313 (2018-12-07)

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.

CVE-2018-18312 (2018-12-05)

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVE-2013-1667 (2013-03-14)

The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key.

CVE-2010-4777 (2014-02-10)

The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.

CVE-2009-3626 (2009-10-29)

Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match.

CVE-2008-1927 (2008-04-24)

Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems.

CVE-2005-3962 (2005-12-01)

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.

CVE-2007-5116 (2007-11-07)

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

CVE-2012-5195 (2012-12-18)

Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.

CVE-2013-7422 (2015-08-16)

Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long digit string associated with an invalid backreference within a regular expression.

NAME

perl573delta - what's new for perl v5.7.3

DESCRIPTION

This document describes differences between the 5.7.2 release and the 5.7.3 release.

(To view the differences between the 5.6.0 release and the 5.7.0 release, see perl570delta. To view the differences between the 5.7.0 release and the 5.7.1 release, see perl571delta. To view the differences between the 5.7.1 release and the 5.7.2 release, see perl572delta.)

Changes

This is just a selected list of some of the more notable changes. The numbers refer to the Perl repository change numbers; see Changes58 (or Changes in Perl 5.8.1). In addition to these changes, lots of work took place in integrating threads, PerlIO, and Unicode; general code cleanup; and last but not least porting to non-UNIX lands such as Win32, VMS, Cygwin, DJGPP, VOS, MacOS Classic, and EBCDIC.

11362

add LC_MESSAGES to POSIX :locale_h export tag

11371

add DEL to [:cntrl:]

11375

make h2ph understand constants like 1234L and 5678LL

11405

Win32: fix bugs in handling of the virtualized environment

11410

fix a bug in the security taint checking of open()

11423

make perl fork() safe even on platforms that don't have pthread_atfork()

11459

make switching optimization and debugging levels during Perl builds easier via the OPTIMIZE environment variable

11475

make split()'s unused captures to be undef, not ''

11485

Search::Dict: allow transforming lines before comparing

11490

allow installing extra modules or bundles when building Perl

11516

add -Wall in cflags when compiling with gcc to weed out dubious C practices

11541

pluggable optimizer

11549

WinCE: integrate the port

11589

Win32: 4-arg select was broken

11594

introduce the perlivp utility for verifying the Perl installation (IVP = Installation Verification Procedure)

11623

rename lib/unicode to lib/unicore to avoid case-insensitivity problems with lib/Unicode

111631

remove Time::Piece

11643

document that use utf8 is not the right way most of the time

11656

allow builing perl with -DUSE_UTF8_SCRIPTS which makes UTF-8 the default script encoding (not the default since that would break all scripts having legacy eight-bit data in them)

11725

division preserving 64-bit integers

11743

document the coderef-in-@INC feature

11794

modulo (%) preserving 64-bit integers

11825

update to Unicode 3.1.1

11865

add the \[$@%&*] prototype support

11874

oct() and hex() in glorious 64 bit

11877

Class::Struct: allow recursive classes

11993

fix unpack U to be the reverse of pack U

12056

VMS: waitpid enhancements

12180

unpack("Z*Z*", pack("Z*Z*", ..)) was broken

12243

Devel::Peek: display UTF-8 SVs also also as \x{...}

12288

Data::Dumper: option to sort hashes

12542

add perlpodspec

12652

threadsafe DynaLoader, re, Opcode, File::Glob, and B

12756

support BeOS better

12874

read-only hashes (user-level interface is Hash::Util)

13162

add Devel::PPPort

13179

add the sort pragma

13326

VMS: fix perl -P

13358

add perlpacktut

13452

SUPER-UX: add hints file

13575

Win32: non-blocking waitpid(-1,WNOHANG)

13684

introduce the -t option for gentler taint checking

14694

add the if pragma

14832

implement IV/UV/NV/long double un/packing with j/J/F/D

14854

document the new taint behaviour of exec LIST and system LIST

Reporting Bugs

If you find what you think is a bug, you might check the articles recently posted to the comp.lang.perl.misc newsgroup and the perl bug database at http://bugs.perl.org. There may also be information at http://www.perl.com/, the Perl Home Page.

If you believe you have an unreported bug, please run the perlbug program included with your release. Be sure to trim your bug down to a tiny but sufficient test case. Your bug report, along with the output of perl -V, will be sent off to perlbug@perl.org to be analysed by the Perl porting team.

SEE ALSO

The Changes file for exhaustive details on what changed.

The INSTALL file for how to build Perl.

The README file for general stuff.

The Artistic and Copying files for copyright information.

HISTORY

Written by Jarkko Hietaniemi <jhi@iki.fi>, with many contributions from The Perl Porters and Perl Users submitting feedback and patches.

Send omissions or corrections to <perlbug@perl.org>.

44 POD Errors

The following errors were encountered while parsing the POD:

Around line 32:

Expected text after =item, not a number

Around line 36:

Expected text after =item, not a number

Around line 40:

Expected text after =item, not a number

Around line 44:

Expected text after =item, not a number

Around line 48:

Expected text after =item, not a number

Around line 52:

Expected text after =item, not a number

Around line 57:

Expected text after =item, not a number

Around line 61:

Expected text after =item, not a number

Around line 65:

Expected text after =item, not a number

Around line 69:

Expected text after =item, not a number

Around line 74:

Expected text after =item, not a number

Around line 78:

Expected text after =item, not a number

Around line 82:

Expected text after =item, not a number

Around line 86:

Expected text after =item, not a number

Around line 91:

Expected text after =item, not a number

Around line 96:

Expected text after =item, not a number

Around line 100:

Expected text after =item, not a number

Around line 104:

Expected text after =item, not a number

Around line 110:

Expected text after =item, not a number

Around line 114:

Expected text after =item, not a number

Around line 118:

Expected text after =item, not a number

Around line 122:

Expected text after =item, not a number

Around line 126:

Expected text after =item, not a number

Around line 130:

Expected text after =item, not a number

Around line 134:

Expected text after =item, not a number

Around line 138:

Expected text after =item, not a number

Around line 142:

Expected text after =item, not a number

Around line 146:

Expected text after =item, not a number

Around line 150:

Expected text after =item, not a number

Around line 154:

Expected text after =item, not a number

Around line 158:

Expected text after =item, not a number

Around line 162:

Expected text after =item, not a number

Around line 166:

Expected text after =item, not a number

Around line 170:

Expected text after =item, not a number

Around line 174:

Expected text after =item, not a number

Around line 178:

Expected text after =item, not a number

Around line 182:

Expected text after =item, not a number

Around line 186:

Expected text after =item, not a number

Around line 190:

Expected text after =item, not a number

Around line 194:

Expected text after =item, not a number

Around line 198:

Expected text after =item, not a number

Around line 202:

Expected text after =item, not a number

Around line 206:

Expected text after =item, not a number

Around line 210:

Expected text after =item, not a number