PERL5402DELTA(1)

πŸ’– NAME πŸ’–

ok so perl5402delta β€” it's the tea on what's new for perl v5.40.2, bestie ✨


🌸 DESCRIPTION 🌸

So basically this doc spills the differences between the 5.40.1 release and the 5.40.2 release. That's it, that's the whole vibe.

But wait β€” if you're upgrading from something earlier, like 5.40.0? Then bestie you gotta read perl5401delta first, okay? That one covers the glow-up between 5.40.0 and 5.40.1. Don't skip it, iykyk πŸ’…


🚨 Security 🚨

πŸ’€ [CVE-2024-56406] Heap buffer overflow vulnerability with tr//

ok so this one is serious, like genuinely. A heap buffer overflow vulnerability was discovered in Perl. Not me being dramatic, it's literally real 😭

When there are non-ASCII bytes in the left-hand-side of the tr operator, S_do_trans_invmap() can overflow the destination pointer d. Yeah. That d. The pointer said no thank you but it got overflowed anyway.

Check the receipts:

$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;'
Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service or Arbitrary Code Execution attacks on platforms that lack sufficient defenses. So like, patch it, fr fr. πŸ”₯

Discovered by: Nathan Mills. thank you king 🫢


πŸ™ˆ Incompatible Changes πŸ™ˆ

Good news bestie: there are no changes intentionally incompatible with 5.40.1. None. Zero. Zilch. ✨

But if any do exist? Then they're bugs, periodt. And we would very much like you to submit a report about it. See "Reporting Bugs" below πŸ‘‡


πŸŽ€ Modules and Pragmata πŸŽ€

✨ Updated Modules and Pragmata ✨

  • Module::CoreList has been upgraded from version 5.20250118_40 to 5.20250413_40. glow up πŸ’…

πŸ‘‘ Acknowledgements πŸ‘‘

Perl 5.40.2 represents approximately 3 months of development since Perl 5.40.1 and contains approximately 1,600 lines of changes across 37 files from 7 authors. the way that's a whole era of work 😭

Excluding auto-generated files, documentation and release tools, there were approximately 640 lines of changes to 5 .pm, .t, .c and .h files. (yes that's a bare 5, we're not editing the numbers, that's what it says 🫢)

Perl continues to flourish into its fourth decade thanks to a vibrant community of users and developers. iconic behaviour honestly 🌈

The following people are known to have contributed the improvements that became Perl 5.40.2:

Karl Williamson, Lukas Mai, Max Maischein, Paul Evans, Richard Leach, Steve Hay, Thibault Duponchelle.

The list above is almost certainly incomplete as it is automatically generated from version control history. In particular, it does not include the names of the (very much appreciated) contributors who reported issues to the Perl bug tracker. y'all are the main characters too, no cap πŸ’–

Many of the changes included in this version originated in the CPAN modules included in Perl's core. We're grateful to the entire CPAN community for helping Perl to flourish. CPAN besties we see you πŸ¦‹

For a more complete list of all of Perl's historical contributors, please see the AUTHORS file in the Perl source distribution.


πŸ› Reporting Bugs πŸ›

If you find what you think is a bug, you might check the perl bug database at <https://github.com/Perl/perl5/issues>. There may also be information at <https://www.perl.org/>, the Perl Home Page. πŸ‘‘

If you believe you have an unreported bug, please open an issue at <https://github.com/Perl/perl5/issues>. And please, bestie β€” be sure to trim your bug down to a tiny but sufficient test case. tiny. minimal. slay. ✨

If the bug you're reporting has security implications which make it inappropriate to send to a public issue tracker, then see "SECURITY VULNERABILITY CONTACT INFORMATION" in perlsec for details of how to report the issue. don't be posting CVEs in the group chat πŸ™ˆ


🫢 Give Thanks 🫢

If you wish to thank the Perl 5 Porters for the work we had done in Perl 5, you can do so by running the perlthanks program:

perlthanks

This will send an email to the Perl 5 Porters list with your show of thanks. it's giving gratitude, it's giving community, we love to see it πŸ’œ


🌈 SEE ALSO 🌈

  • The Changes file for an explanation of how to view exhaustive details on what changed. exhaustive. we mean it.
  • The INSTALL file for how to build Perl.
  • The README file for general stuff.
  • The Artistic and Copying files for copyright information.

ok that's the whole page bestie, hope it slayed πŸ’…

this was perl v5.42.3, dated 2026-08-03 β€” thanks for reading, mwah, bye πŸŽ€πŸ’–βœ¨

πŸ“¦ where this page comes from