UbuntuUpdates.org

Package "perl-modules-5.34"

Name: perl-modules-5.34

Description:

Core Perl modules
Latest version: 5.34.0-3ubuntu1.8
Release: jammy (22.04)
Level: updates
Repository: main
Head package: perl
Homepage: http://dev.perl.org/perl5/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "perl-modules-5.34"

All arch deb package
APT INSTALL

Other versions of "perl-modules-5.34" in Jammy

Repository Area Version
security main 5.34.0-3ubuntu1.8

Changelog

Version: 5.34.0-3ubuntu1.8 2026-08-25 18:07:30 UTC
No changelog available yet.
Source diff to previous version

Version: 5.34.0-3ubuntu1.7 2026-06-24 14:07:32 UTC

  perl (5.34.0-3ubuntu1.7) jammy-security; urgency=high

  * SECURITY UPDATE: integer overflow in regular expression compiler
    - debian/patches/CVE-2026-8376_1.patch: accept quantifier limit error
      on 32-bit architectures where the quantifier limit catches the
      oversized pattern before the overflow guard
    - CVE-2026-8376

 -- Chrisa Oikonomou <email address hidden> Mon, 23 Jun 2026 11:11:00 +0300
Source diff to previous version
CVE-2026-8376 Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_stu

Version: 5.34.0-3ubuntu1.5 2025-07-30 01:07:00 UTC

  perl (5.34.0-3ubuntu1.5) jammy-security; urgency=medium

  * SECURITY UPDATE: threads race condition in file operations
    - debian/patches/fixes/CVE-2025-40909-metaconfig.diff: check for
      fdopendir in regen-configure/U/perl/d_fdopendir.U.
    - debian/patches/fixes/CVE-2025-40909-1.diff: clone dirhandles without
      fchdir in Configure, Cross/config.sh-arm-linux,
      Cross/config.sh-arm-linux-n770, Porting/Glossary, Porting/config.sh,
      config_h.SH, configure.com, plan9/config_sh.sample, sv.c,
      t/op/threads-dirh.t, win32/config.gc, win32/config.vc.
    - debian/patches/fixes/CVE-2025-40909-2.diff: minor corrections in
      Cross/config.sh-arm-linux, Cross/config.sh-arm-linux-n770,
      config_h.SH,plan9/config_sh.sample.
    - debian/patches/fixes/CVE-2025-40909-3.diff: use PerlLIO_dup_cloexec
      in Perl_dirp_dup to set O_CLOEXEC in sv.c.
    - debian/patches/fixes/CVE-2025-40909-metaconfig-reorder.diff: slightly
      reorder Configure and config_h.SH to match metaconfig output in
      Configure, config_h.SH.
    - debian/patches/fixes/CVE-2025-40909-generated.diff: update generated
      files and checksums in uconfig.sh, uconfig64.sh, uconfig.h,
      NetWare/config.wc.
    - CVE-2025-40909

 -- Marc Deslauriers <email address hidden> Fri, 25 Jul 2025 13:26:40 -0400
Source diff to previous version
CVE-2025-40909 Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread crea

Version: 5.34.0-3ubuntu1.4 2025-04-14 16:07:05 UTC

  perl (5.34.0-3ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: heap overflow when transliterating non-ASCII bytes
    - debian/patches/CVE-2024-56406.patch: properly calculate needed space
      in op.c.
    - CVE-2024-56406

 -- Marc Deslauriers <email address hidden> Tue, 08 Apr 2025 09:21:50 -0400
Source diff to previous version
CVE-2024-56406 A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development version

Version: 5.34.0-3ubuntu1.3 2023-11-27 16:07:34 UTC

  perl (5.34.0-3ubuntu1.3) jammy-security; urgency=medium

  * SECURITY UPDATE: heap overflow via regular expression
    - debian/patches/CVE-2023-47038.patch: fix read/write past buffer end
      in regcomp.c, t/re/pat_advanced.t.
    - CVE-2023-47038
  * SECURITY UPDATE: infinite recursion via warning message printing
    - debian/patches/CVE-2022-48522.patch: fix warning handling in sv.c,
      t/lib/warnings/sv.
    - CVE-2022-48522

 -- Marc Deslauriers <email address hidden> Thu, 23 Nov 2023 09:56:46 -0500
CVE-2023-47038 Write past buffer end via illegal user-defined Unicode property
CVE-2022-48522 In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.


About   -   Send Feedback to @ubuntu_updates