| Message ID | 20250518195129.448725-2-schonm@gmail.com |
|---|---|
| State | New |
| Headers | show |
| Series | [walnascar,1/2] perlcross: update 1.6 -> 1.6.2 | expand |
diff --git a/meta/recipes-devtools/perl/perl_5.40.0.bb b/meta/recipes-devtools/perl/perl_5.40.2.bb similarity index 99% rename from meta/recipes-devtools/perl/perl_5.40.0.bb rename to meta/recipes-devtools/perl/perl_5.40.2.bb index 0d4338f29f..95c230060d 100644 --- a/meta/recipes-devtools/perl/perl_5.40.0.bb +++ b/meta/recipes-devtools/perl/perl_5.40.2.bb @@ -25,7 +25,7 @@ SRC_URI:append:class-target = " \ file://encodefix.patch \ " -SRC_URI[perl.sha256sum] = "c740348f357396327a9795d3e8323bafd0fe8a5c7835fc1cbaba0cc8dfe7161f" +SRC_URI[perl.sha256sum] = "10d4647cfbb543a7f9ae3e5f6851ec49305232ea7621aed24c7cfbb0bef4b70d" B = "${WORKDIR}/perl-${PV}-build"
This fixes CVE-2024-56406 - Heap buffer overflow vulnerability with tr// https://nvd.nist.gov/vuln/detail/CVE-2024-56406 From https://metacpan.org/pod/perldelta : "There are no changes intentionally incompatible with 5.40.1. If any exist, they are bugs, and we request that you submit a report." From https://metacpan.org/dist/perl/view/pod/perl5401delta.pod : "There are no changes intentionally incompatible with 5.40.0. If any exist, they are bugs, and we request that you submit a report." Signed-off-by: Jason Schonberg <schonm@gmail.com> --- meta/recipes-devtools/perl/{perl_5.40.0.bb => perl_5.40.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/perl/{perl_5.40.0.bb => perl_5.40.2.bb} (99%)