PERL5402DELTA(1)
π NAME π
ok so perl5402delta β it's the tea on what's new for perl v5.40.2, bestie β¨
πΈ DESCRIPTION πΈ
So basically this doc spills the differences between the 5.40.1 release and the 5.40.2 release. That's it, that's the whole vibe.
But wait β if you're upgrading from something earlier, like 5.40.0? Then bestie you gotta read perl5401delta first, okay? That one covers the glow-up between 5.40.0 and 5.40.1. Don't skip it, iykyk π
π¨ Security π¨
π [CVE-2024-56406] Heap buffer overflow vulnerability with tr//
ok so this one is serious, like genuinely. A heap buffer overflow vulnerability was discovered in Perl. Not me being dramatic, it's literally real π
When there are non-ASCII bytes in the left-hand-side of the tr operator, S_do_trans_invmap() can overflow the destination pointer d. Yeah. That d. The pointer said no thank you but it got overflowed anyway.
Check the receipts:
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;'
Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service or Arbitrary Code Execution attacks on platforms that lack sufficient defenses. So like, patch it, fr fr. π₯
Discovered by: Nathan Mills. thank you king π«Ά
π Incompatible Changes π
Good news bestie: there are no changes intentionally incompatible with 5.40.1. None. Zero. Zilch. β¨
But if any do exist? Then they're bugs, periodt. And we would very much like you to submit a report about it. See "Reporting Bugs" below π
π Modules and Pragmata π
β¨ Updated Modules and Pragmata β¨
Module::CoreListhas been upgraded from version5.20250118_40to5.20250413_40. glow up π
π Acknowledgements π
Perl 5.40.2 represents approximately 3 months of development since Perl 5.40.1 and contains approximately 1,600 lines of changes across 37 files from 7 authors. the way that's a whole era of work π
Excluding auto-generated files, documentation and release tools, there were approximately 640 lines of changes to 5 .pm, .t, .c and .h files. (yes that's a bare 5, we're not editing the numbers, that's what it says π«Ά)
Perl continues to flourish into its fourth decade thanks to a vibrant community of users and developers. iconic behaviour honestly π
The following people are known to have contributed the improvements that became Perl 5.40.2:
Karl Williamson, Lukas Mai, Max Maischein, Paul Evans, Richard Leach, Steve Hay, Thibault Duponchelle.
The list above is almost certainly incomplete as it is automatically generated from version control history. In particular, it does not include the names of the (very much appreciated) contributors who reported issues to the Perl bug tracker. y'all are the main characters too, no cap π
Many of the changes included in this version originated in the CPAN modules included in Perl's core. We're grateful to the entire CPAN community for helping Perl to flourish. CPAN besties we see you π¦
For a more complete list of all of Perl's historical contributors, please see the AUTHORS file in the Perl source distribution.
π Reporting Bugs π
If you find what you think is a bug, you might check the perl bug database at <https://github.com/Perl/perl5/issues>. There may also be information at <https://www.perl.org/>, the Perl Home Page. π
If you believe you have an unreported bug, please open an issue at <https://github.com/Perl/perl5/issues>. And please, bestie β be sure to trim your bug down to a tiny but sufficient test case. tiny. minimal. slay. β¨
If the bug you're reporting has security implications which make it inappropriate to send to a public issue tracker, then see "SECURITY VULNERABILITY CONTACT INFORMATION" in perlsec for details of how to report the issue. don't be posting CVEs in the group chat π
π«Ά Give Thanks π«Ά
If you wish to thank the Perl 5 Porters for the work we had done in Perl 5, you can do so by running the perlthanks program:
perlthanks
This will send an email to the Perl 5 Porters list with your show of thanks. it's giving gratitude, it's giving community, we love to see it π
π SEE ALSO π
- The
Changesfile for an explanation of how to view exhaustive details on what changed. exhaustive. we mean it. - The
INSTALLfile for how to build Perl. - The
READMEfile for general stuff. - The
ArtisticandCopyingfiles for copyright information.
ok that's the whole page bestie, hope it slayed π
this was perl v5.42.3, dated 2026-08-03 β thanks for reading, mwah, bye ππβ¨
π¦ where this page comes from
- fedora 43: perl-doc 5.42.3-524.fc43 Β· (GPL-1.0-or-later OR Artistic-1.0-Perl) AND Unicode-3.0 AND LicenseRef-Fedora-UltraPermissive
- fedora 44: perl-doc 5.42.3-525.fc44 Β· (GPL-1.0-or-later OR Artistic-1.0-Perl) AND Unicode-3.0 AND LicenseRef-Fedora-UltraPermissive
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms