head	1.2;
access;
symbols
	pkgsrc-2026Q2:1.2.0.2;
locks; strict;
comment	@# @;


1.2
date	2026.07.16.18.57.37;	author wiz;	state dead;
branches
	1.2.2.1;
next	1.1;
commitid	cnixJgiQyaTQwUNG;

1.1
date	2026.07.13.18.44.25;	author wiz;	state Exp;
branches;
next	;
commitid	SD9vpQgMTdG6ywNG;

1.2.2.1
date	2026.07.16.18.57.37;	author maya;	state dead;
branches;
next	1.2.2.2;
commitid	ypKysGhYF2bJfVNG;

1.2.2.2
date	2026.07.16.21.08.19;	author maya;	state Exp;
branches;
next	;
commitid	ypKysGhYF2bJfVNG;


desc
@@


1.2
log
@perl: update to 5.44.0.

Core Enhancements

Named Parameters in Signatures
Multi-variable foreach can now use aliased references
Enhanced operation of regular expression patterns under /xx
Unicode 17.0 is supported
New source of entropy for PRNG seeding

Security

CVE-2026-8376 - Buffer overflow in Perl_study_chunk
CVE-2026-57432 - Buffer overflow in S_measure_struct
CVE-2026-13221 - Regex trie 16-bit field overflow

Incompatible Changes

Unicode rules are now fully enforced on identifier and regular expression group names.

More details at
https://metacpan.org/dist/perl/changes
@
text
@$NetBSD: patch-dist_Storable_Storable.xs,v 1.1 2026/07/13 18:44:25 wiz Exp $

Storable versions before 3.41 for Perl have a signed integer overflow
when deserializing a crafted SX_HOOK record
https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch

--- dist/Storable/Storable.xs.orig	2026-01-18 17:50:04.000000000 +0000
+++ dist/Storable/Storable.xs
@@@@ -5035,7 +5035,10 @@@@ static SV *retrieve_hook_common(pTHX_ stcxt_t *cxt, co
         }
         else
             GETMARK(len3);
-        if (len3) {
+        if (len3 == I32_MAX)
+            /* If len3 is exactly I32_MAX it will upset av_extend below */
+            CROAK(("Invalid count of hook data items"));
+        else if (len3) {
             av = newAV();
             av_extend(av, len3 + 1);    /* Leave room for [0] */
             AvFILLp(av) = len3;         /* About to be filled anyway */
@


1.2.2.1
log
@file patch-dist_Storable_Storable.xs was added on branch pkgsrc-2026Q2 on 2026-07-16 21:08:19 +0000
@
text
@d1 20
@


1.2.2.2
log
@Pullup ticket #7182 - requested by taca
lang/perl5: Security fix

Revisions pulled up:
- lang/perl5/Makefile                                           1.295
- lang/perl5/distinfo                                           1.200
- lang/perl5/patches/patch-dist_Storable_Storable.xs            1.1
- lang/perl5/patches/patch-pp__pack.c                           1.1
- lang/perl5/patches/patch-regcomp__study.c                     1.2

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Mon Jul 13 18:44:25 UTC 2026

   Modified Files:
   	pkgsrc/lang/perl5: Makefile distinfo
   	pkgsrc/lang/perl5/patches: patch-regcomp__study.c
   Added Files:
   	pkgsrc/lang/perl5/patches: patch-dist_Storable_Storable.xs
   	    patch-pp__pack.c

   Log Message:
   perl: fix CVE-2026-13221, CVE-2026-57432, CVE-2026-57433.

   Bump PKGREVISION.
@
text
@a0 20
$NetBSD: patch-dist_Storable_Storable.xs,v 1.1 2026/07/13 18:44:25 wiz Exp $

Storable versions before 3.41 for Perl have a signed integer overflow
when deserializing a crafted SX_HOOK record
https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch

--- dist/Storable/Storable.xs.orig	2026-01-18 17:50:04.000000000 +0000
+++ dist/Storable/Storable.xs
@@@@ -5035,7 +5035,10 @@@@ static SV *retrieve_hook_common(pTHX_ stcxt_t *cxt, co
         }
         else
             GETMARK(len3);
-        if (len3) {
+        if (len3 == I32_MAX)
+            /* If len3 is exactly I32_MAX it will upset av_extend below */
+            CROAK(("Invalid count of hook data items"));
+        else if (len3) {
             av = newAV();
             av_extend(av, len3 + 1);    /* Leave room for [0] */
             AvFILLp(av) = len3;         /* About to be filled anyway */
@


1.1
log
@perl: fix CVE-2026-13221, CVE-2026-57432, CVE-2026-57433.

Bump PKGREVISION.
@
text
@d1 1
a1 1
$NetBSD$
@