Re: [LFS Trac] #5980: perl-5.44.0

This is a multi-part message in MIME format...

------------=_1785077752-1024790-5968
Content-Type: multipart/related;
 boundary="===============4630318135445567239=="

--===============4630318135445567239==
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

#5980: perl-5.44.0
-------------------------+-----------------------
 Reporter:  Bruce Dubbs  |       Owner:  lfs-book
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  13.1
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-----------------------
Comment (by Xi Ruoyao):

 https://metacpan.org/release/LEONT/perl-5.44.0/view/pod/perldelta.pod

 **CVE-2026-8376 - Buffer overflow in Perl_study_chunk

 Perl_study_chunk in regcomp_study.c checked the size of the joined
 substring buffer in characters rather than bytes. On 32-bit builds, this
 can lead to an integer overflow of the size of the buffer leading to out-
 of-bounds writes.

 **CVE-2026-57432 - Buffer overflow in S_measure_struct

 If you call pack or unpack to operate on a structure whose computed size
 is too large to fit in memory, an integer overflow could happen that would
 result in a buffer overflow. This usually happens as a result of embedding
 a large number as the repeat count for an item.

 **CVE-2026-13221 - Regex trie 16-bit field overflow

 The trie optimization in the regex engine could overflow in an alternation
 with more than ~65k branches. This could cause both false positives and
 false negatives on such regular expressions.
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5980#comment:1>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

--===============4630318135445567239==--

------------=_1785077752-1024790-5968
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page

------------=_1785077752-1024790-5968--