1PERL5262DELTA(1) Perl Programmers Reference Guide PERL5262DELTA(1)
2
6 perl5262delta - what is new for perl v5.26.2
7
9 This document describes differences between the 5.26.1 release and the
10 5.26.2 release.
11 If you are upgrading from an earlier release such as 5.26.0, first read
13 perl5261delta, which describes differences between 5.26.0 and 5.26.1.
14
16 [CVE-2018-6797] heap-buffer-overflow (WRITE of size 1) in S_regatom
17 (regcomp.c)
18 A crafted regular expression could cause a heap buffer write overflow,
19 with control over the bytes written. [GH #16185]
20 <https://github.com/Perl/perl5/issues/16185>
21 [CVE-2018-6798] Heap-buffer-overflow in Perl__byte_dump_string (utf8.c)
23 Matching a crafted locale dependent regular expression could cause a
24 heap buffer read overflow and potentially information disclosure. [GH
25 #16143] <https://github.com/Perl/perl5/issues/16143>
26 [CVE-2018-6913] heap-buffer-overflow in S_pack_rec
28 "pack()" could cause a heap buffer write overflow with a large item
29 count. [GH #16098] <https://github.com/Perl/perl5/issues/16098>
30 Assertion failure in Perl__core_swash_init (utf8.c)
32 Control characters in a supposed Unicode property name could cause perl
33 to crash. This has been fixed. [perl #132055]
34 <https://rt.perl.org/Public/Bug/Display.html?id=132055> [perl #132553]
35 <https://rt.perl.org/Public/Bug/Display.html?id=132553> [perl #132658]
36 <https://rt.perl.org/Public/Bug/Display.html?id=132658>
37
39 There are no changes intentionally incompatible with 5.26.1. If any
40 exist, they are bugs, and we request that you submit a report. See
41 "Reporting Bugs" below.
42
44 Updated Modules and Pragmata
45 • Module::CoreList has been upgraded from version 5.20170922_26 to
46 5.20180414_26.
47 • PerlIO::via has been upgraded from version 0.16 to 0.17.
49 • Term::ReadLine has been upgraded from version 1.16 to 1.17.
51 • Unicode::UCD has been upgraded from version 0.68 to 0.69.
53
55 Changes to Existing Documentation
56 perluniprops
57 • This has been updated to note that "\p{Word}" now includes code
59 points matching the "\p{Join_Control}" property. The change to the
60 property was made in Perl 5.18, but not documented until now.
61 There are currently only two code points that match this property:
62 U+200C (ZERO WIDTH NON-JOINER) and U+200D (ZERO WIDTH JOINER).
63
65 Platform-Specific Notes
66 Windows
67 Visual C++ compiler version detection has been improved to work on
68 non-English language systems. [GH #16235]
69 <https://github.com/Perl/perl5/issues/16235>
70 We now set $Config{libpth} correctly for 64-bit builds using Visual
72 C++ versions earlier than 14.1. [GH #16269]
73 <https://github.com/Perl/perl5/issues/16269>
74
76 • The "readpipe()" built-in function now checks at compile time that
77 it has only one parameter expression, and puts it in scalar
78 context, thus ensuring that it doesn't corrupt the stack at
79 runtime. [GH #2793] <https://github.com/Perl/perl5/issues/2793>
80 • Fixed a use after free bug in "pp_list" introduced in Perl 5.27.1.
82 [GH #16124] <https://github.com/Perl/perl5/issues/16124>
83 • Parsing a "sub" definition could cause a use after free if the
85 "sub" keyword was followed by whitespace including newlines (and
86 comments). [GH #16097]
87 <https://github.com/Perl/perl5/issues/16097>
88 • The tokenizer now correctly adjusts a parse pointer when skipping
90 whitespace in an " ${identifier} " construct. [perl #131949]
91 <https://rt.perl.org/Public/Bug/Display.html?id=131949>
92 • Accesses to "${^LAST_FH}" no longer assert after using any of a
94 variety of I/O operations on a non-glob. [GH #15372]
95 <https://github.com/Perl/perl5/issues/15372>
96 • "sort" now performs correct reference counting when aliasing $a and
98 $b, thus avoiding premature destruction and leakage of scalars if
99 they are re-aliased during execution of the sort comparator. [GH
100 #11422] <https://github.com/Perl/perl5/issues/11422>
101 • Some convoluted kinds of regexp no longer cause an arithmetic
103 overflow when compiled. [GH #16113]
104 <https://github.com/Perl/perl5/issues/16113>
105 • Fixed a duplicate symbol failure with -flto -mieee-fp builds. pp.c
107 defined "_LIB_VERSION" which -lieee already defines. [GH #16086]
108 <https://github.com/Perl/perl5/issues/16086>
109 • A NULL pointer dereference in the "S_regmatch()" function has been
111 fixed. [perl #132017]
112 <https://rt.perl.org/Public/Bug/Display.html?id=132017>
113 • Failures while compiling code within other constructs, such as with
115 string interpolation and the right part of "s///e" now cause
116 compilation to abort earlier.
117 Previously compilation could continue in order to report other
119 errors, but the failed sub-parse could leave partly parsed
120 constructs on the parser shift-reduce stack, confusing the parser,
121 leading to perl crashes. [GH #14739]
122 <https://github.com/Perl/perl5/issues/14739>
123
125 Perl 5.26.2 represents approximately 7 months of development since Perl
126 5.26.1 and contains approximately 3,300 lines of changes across 82
127 files from 17 authors.
128 Excluding auto-generated files, documentation and release tools, there
130 were approximately 1,800 lines of changes to 36 .pm, .t, .c and .h
131 files.
132 Perl continues to flourish into its third decade thanks to a vibrant
134 community of users and developers. The following people are known to
135 have contributed the improvements that became Perl 5.26.2:
136 Aaron Crane, Abigail, Chris 'BinGOs' Williams, H.Merijn Brand, James E
138 Keenan, Jarkko Hietaniemi, John SJ Anderson, Karen Etheridge, Karl
139 Williamson, Lukas Mai, Renee Baecker, Sawyer X, Steve Hay, Todd
140 Rinaldo, Tony Cook, Yves Orton, Zefram.
141 The list above is almost certainly incomplete as it is automatically
143 generated from version control history. In particular, it does not
144 include the names of the (very much appreciated) contributors who
145 reported issues to the Perl bug tracker.
146 Many of the changes included in this version originated in the CPAN
148 modules included in Perl's core. We're grateful to the entire CPAN
149 community for helping Perl to flourish.
150 For a more complete list of all of Perl's historical contributors,
152 please see the AUTHORS file in the Perl source distribution.
153
155 If you find what you think is a bug, you might check the perl bug
156 database at <https://rt.perl.org/> . There may also be information at
157 <http://www.perl.org/> , the Perl Home Page.
158 If you believe you have an unreported bug, please run the perlbug
160 program included with your release. Be sure to trim your bug down to a
161 tiny but sufficient test case. Your bug report, along with the output
162 of "perl -V", will be sent off to perlbug@perl.org to be analysed by
163 the Perl porting team.
164 If the bug you are reporting has security implications which make it
166 inappropriate to send to a publicly archived mailing list, then see
167 "SECURITY VULNERABILITY CONTACT INFORMATION" in perlsec for details of
168 how to report the issue.
169
171 If you wish to thank the Perl 5 Porters for the work we had done in
172 Perl 5, you can do so by running the "perlthanks" program:
173 perlthanks
175 This will send an email to the Perl 5 Porters list with your show of
177 thanks.
178
180 The Changes file for an explanation of how to view exhaustive details
181 on what changed.
182 The INSTALL file for how to build Perl.
184 The README file for general stuff.
186 The Artistic and Copying files for copyright information.
188perl v5.34.0 2021-10-18 PERL5262DELTA(1)