In perl.git, the branch blead has been updated <http://perl5.git.perl.org/perl.git/commitdiff/8af848c0456f973c6c7979ad5a53c4bd0b9d353a?hp=11d2dbf34f1e797a4942aeec6d1a41ce6ee34ead>
- Log ----------------------------------------------------------------- commit 8af848c0456f973c6c7979ad5a53c4bd0b9d353a Author: David Mitchell <da...@iabyn.com> Date: Mon Mar 11 11:13:53 2013 +0000 fix typo in epigraphs.pod M Porting/epigraphs.pod commit 362f137393ed3cdae0ce5e627f64d9eaa2be3ec3 Author: David Mitchell <da...@iabyn.com> Date: Mon Mar 11 10:45:15 2013 +0000 add 5.14.4 to perlhist M pod/perlhist.pod commit 1e5cc764e94a44bd98cb77f92593dd2a399bf038 Author: David Mitchell <da...@iabyn.com> Date: Mon Mar 11 01:13:49 2013 +0000 add perl5144delta M MANIFEST M pod/perl.pod A pod/perl5144delta.pod M win32/pod.mak ----------------------------------------------------------------------- Summary of changes: MANIFEST | 1 + Porting/epigraphs.pod | 2 +- pod/perl.pod | 1 + pod/perl5144delta.pod | 240 +++++++++++++++++++++++++++++++++++++++++++++++++ pod/perlhist.pod | 3 + win32/pod.mak | 4 + 6 files changed, 250 insertions(+), 1 deletions(-) create mode 100644 pod/perl5144delta.pod diff --git a/MANIFEST b/MANIFEST index 8ec86be..bccab21 100644 --- a/MANIFEST +++ b/MANIFEST @@ -4714,6 +4714,7 @@ pod/perl5140delta.pod Perl changes in version 5.14.0 pod/perl5141delta.pod Perl changes in version 5.14.1 pod/perl5142delta.pod Perl changes in version 5.14.2 pod/perl5143delta.pod Perl changes in version 5.14.3 +pod/perl5144delta.pod Perl changes in version 5.14.4 pod/perl5160delta.pod Perl changes in version 5.16.0 pod/perl5161delta.pod Perl changes in version 5.16.1 pod/perl5162delta.pod Perl changes in version 5.16.2 diff --git a/Porting/epigraphs.pod b/Porting/epigraphs.pod index a47f403..41c6746 100644 --- a/Porting/epigraphs.pod +++ b/Porting/epigraphs.pod @@ -28,7 +28,7 @@ Chuck. Then he added, in an afterthought: 'Wonder if the computer's finished its run. It was due about now.' Chuck didn't reply, so George swung round in his saddle. He could just -see Chuck's face, a while oval turned towards the sky. +see Chuck's face, a white oval turned towards the sky. 'Look,' whispered Chuck, and George lifted his eyes to heaven. (There is always a last time for everything.) diff --git a/pod/perl.pod b/pod/perl.pod index d218491..eb0abb5 100644 --- a/pod/perl.pod +++ b/pod/perl.pod @@ -192,6 +192,7 @@ aux a2p c2ph h2ph h2xs perlbug pl2pm pod2html pod2man s2p splain xsubpp perl5161delta Perl changes in version 5.16.1 perl5162delta Perl changes in version 5.16.2 perl5160delta Perl changes in version 5.16.0 + perl5144delta Perl changes in version 5.14.4 perl5143delta Perl changes in version 5.14.3 perl5142delta Perl changes in version 5.14.2 perl5141delta Perl changes in version 5.14.1 diff --git a/pod/perl5144delta.pod b/pod/perl5144delta.pod new file mode 100644 index 0000000..23deecb --- /dev/null +++ b/pod/perl5144delta.pod @@ -0,0 +1,240 @@ +=encoding utf8 + +=head1 NAME + +perl5144delta - what is new for perl v5.14.4 + +=head1 DESCRIPTION + +This document describes differences between the 5.14.3 release and +the 5.14.4 release. + +If you are upgrading from an earlier release such as 5.12.0, first read +L<perl5140delta>, which describes differences between 5.12.0 and +5.14.0. + +=head1 Core Enhancements + +No changes since 5.14.0. + +=head1 Security + +This release contains one major, and medium, and a number of minor +security fixes. The latter are included mainly to allow the test suite to +pass cleanly with the clang compiler's address sanitizer facility. + +=head2 CVE-2013-1667: memory exhaustion with arbitrary hash keys + +With a carefully crafted set of hash keys (for example arguments on a +URL), it is possible to cause a hash to consume a large amount of memory +and CPU, and thus possibly to achieve a Denial-of-Service. + +This problem has been fixed. + +=head2 memory leak in Encode + +The UTF-8 encoding implementation in Encode.xs had a memory leak which has been +fixed. + +=head2 [perl #111594] Socket::unpack_sockaddr_un heap-buffer-overflow + +A read buffer overflow could occur when copying C<sockaddr> buffers. +Fairly harmless. + +This problem has been fixed. + +=head2 [perl #111586] SDBM_File: fix off-by-one access to global ".dir" + +An extra byte was being copied for some string literals. Fairly harmless. + +This problem has been fixed. + +=head2 off-by-two error in List::Util + +A string literal was being used that included two bytes beyond the +end of the string. Fairly harmless. + +This problem has been fixed. + +=head2 [perl #115994] fix segv in regcomp.c:S_join_exact() + +Under debugging builds, while marking optimised-out regex nodes as type +C<OPTIMIZED>, it could treat blocks of exact text as if they were nodes, +and thus SEGV. Fairly harmless. + +This problem has been fixed. + +=head2 [perl #115992] PL_eval_start use-after-free + +The statement C<local $[;>, when preceded by an C<eval>, and when not part +of an assignment, could crash. Fairly harmless. + +This problem has been fixed. + +=head2 wrap-around with IO on long strings + +Reading or writing strings greater than 2**31 bytes in size could segfault +due to integer wraparound. + +This problem has been fixed. + +=head1 Incompatible Changes + +There are no changes intentionally incompatible with 5.14.0. If any +exist, they are bugs and reports are welcome. + +=head1 Deprecations + +There have been no deprecations since 5.14.0. + +=head1 Modules and Pragmata + +=head2 New Modules and Pragmata + +None + +=head2 Updated Modules and Pragmata + +The following modules have just the minor code fixes as listed above in +L</Security> (version numbers have not changed): + +=over 4 + +=item Socket + +=item SDBM_File + +=item List::Util + +=back + +L<Encode> has been upgraded from version 2.42_01 to version 2.42_02. + +L<Module::CoreList> has been updated to version 2.49_06 to add data for +this release. + +=head2 Removed Modules and Pragmata + +None. + +=head1 Documentation + +=head2 New Documentation + +None. + +=head2 Changes to Existing Documentation + +None. + +=head1 Diagnostics + +No new or changed diagnostics. + +=head1 Utility Changes + +None + +=head1 Configuration and Compilation + +No changes. + +=head1 Platform Support + +=head2 New Platforms + +None. + +=head2 Discontinued Platforms + +None. + +=head2 Platform-Specific Notes + +=over 4 + +=item VMS + +5.14.3 failed to compile on VMS due to incomplete application of a patch +series that allowed C<userelocatableinc> and C<usesitecustomize> to be +used simultaneously. Other platforms were not affected and the problem +has now been corrected. + +=back + +=head1 Selected Bug Fixes + +=over 4 + +=item * + +In Perl 5.14.0, C<$tainted ~~ @array> stopped working properly. Sometimes +it would erroneously fail (when C<$tainted> contained a string that occurs +in the array I<after> the first element) or erroneously succeed (when +C<undef> occurred after the first element) [perl #93590]. + +=back + +=head1 Known Problems + +None. + +=head1 Acknowledgements + +Perl 5.14.4 represents approximately 5 months of development since Perl 5.14.3 +and contains approximately 1,700 lines of changes across 49 files from 12 +authors. + +Perl continues to flourish into its third decade thanks to a vibrant community +of users and developers. The following people are known to have contributed the +improvements that became Perl 5.14.4: + +Andy Dougherty, Chris 'BinGOs' Williams, Christian Hansen, Craig A. Berry, +Dave Rolsky, David Mitchell, Dominic Hargreaves, Father Chrysostomos, +Florian Ragwitz, Reini Urban, Ricardo Signes, Yves Orton. + + +The list above is almost certainly incomplete as it is automatically generated +from version control history. In particular, it does not include the names of +the (very much appreciated) contributors who reported issues to the Perl bug +tracker. + +For a more complete list of all of Perl's historical contributors, please see +the F<AUTHORS> file in the Perl source distribution. + + +=head1 Reporting Bugs + +If you find what you think is a bug, you might check the articles +recently posted to the comp.lang.perl.misc newsgroup and the perl +bug database at http://rt.perl.org/perlbug/ . There may also be +information at http://www.perl.org/ , the Perl Home Page. + +If you believe you have an unreported bug, please run the L<perlbug> +program included with your release. Be sure to trim your bug down +to a tiny but sufficient test case. Your bug report, along with the +output of C<perl -V>, will be sent off to perl...@perl.org to be +analysed by the Perl porting team. + +If the bug you are reporting has security implications, which make it +inappropriate to send to a publicly archived mailing list, then please send +it to perl5-security-rep...@perl.org. This points to a closed subscription +unarchived mailing list, which includes all the core committers, who be able +to help assess the impact of issues, figure out a resolution, and help +co-ordinate the release of patches to mitigate or fix the problem across all +platforms on which Perl is supported. Please only use this address for +security issues in the Perl core, not for modules independently +distributed on CPAN. + +=head1 SEE ALSO + +The F<Changes> file for an explanation of how to view exhaustive details +on what changed. + +The F<INSTALL> file for how to build Perl. + +The F<README> file for general stuff. + +The F<Artistic> and F<Copying> files for copyright information. + +=cut diff --git a/pod/perlhist.pod b/pod/perlhist.pod index 58700d3..b3082f7 100644 --- a/pod/perlhist.pod +++ b/pod/perlhist.pod @@ -467,6 +467,9 @@ the strings?). Florian 5.14.2-RC1 2011-Sep-19 5.14.2 2011-Sep-26 Dominic 5.14.3 2012-Oct-12 + David M 5.14.4-RC1 2013-Mar-05 + David M 5.14.4-RC2 2013-Mar-07 + David M 5.14.4 2013-Mar-10 David G 5.15.0 2011-Jun-20 The 5.15 development track Zefram 5.15.1 2011-Jul-20 diff --git a/win32/pod.mak b/win32/pod.mak index 4287aa7..6a0d97c 100644 --- a/win32/pod.mak +++ b/win32/pod.mak @@ -28,6 +28,7 @@ POD = perl.pod \ perl5141delta.pod \ perl5142delta.pod \ perl5143delta.pod \ + perl5144delta.pod \ perl5160delta.pod \ perl5161delta.pod \ perl5162delta.pod \ @@ -161,6 +162,7 @@ MAN = perl.man \ perl5141delta.man \ perl5142delta.man \ perl5143delta.man \ + perl5144delta.man \ perl5160delta.man \ perl5161delta.man \ perl5162delta.man \ @@ -294,6 +296,7 @@ HTML = perl.html \ perl5141delta.html \ perl5142delta.html \ perl5143delta.html \ + perl5144delta.html \ perl5160delta.html \ perl5161delta.html \ perl5162delta.html \ @@ -427,6 +430,7 @@ TEX = perl.tex \ perl5141delta.tex \ perl5142delta.tex \ perl5143delta.tex \ + perl5144delta.tex \ perl5160delta.tex \ perl5161delta.tex \ perl5162delta.tex \ -- Perl5 Master Repository