diff options
| author | Philip Prindeville <philipp@redfish-solutions.com> | 2017-09-24 17:39:27 -0600 |
|---|---|---|
| committer | Philip Prindeville <philipp@redfish-solutions.com> | 2017-10-24 11:40:34 -0600 |
| commit | 4a94479f9652fec59c76e5bc187f9dc08fc8eca7 (patch) | |
| tree | 351ac3f65ce78e197f0f2faf379c870ec2ced6be /lang/python/python-dateutil | |
| parent | 4317fe0a10ddb6a3dfc4b88e42b74546aa8b9f89 (diff) | |
perl: update to 5.26.1
Required changes:
* Add qualifying '.' to scripts or to @INC, as appropriate since we're
enabling default_inc_excludes_dot;
* Add new platform/library definitions like double-double format and
locale library functions/headers;
* Delete patch 020 as it's been upstreamed;
Optional changes:
* Instead of using -@rm and having that fail, emit an error message,
and be ignored, just use @rm -f instead which will always succeed.
Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler
Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]
[CVE-2017-12883] Buffer over-read in regular expression parser
For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]
[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows
A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Diffstat (limited to 'lang/python/python-dateutil')
0 files changed, 0 insertions, 0 deletions
