NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/perl: security bump to 5.36.2

Browse Source 
fix CVE-2023-47038 - Write past buffer end via illegal user-defined Unicode property

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Francois Perrad 2023-11-27 04:26:39 +01:00 committed by Peter Korsgaard
parent c9222fe0fc
commit 127986f3ed
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
package/perl/perl.hash
View File

@ -1,10 +1,10 @@
# Hashes from: https://www.cpan.org/src/5.0/perl-5.36.1.tar.xz.{md5,sha1,sha256}.txt
md5 825f6b1d7e03b22522e0bdb992fbb728 perl-5.36.1.tar.xz
sha1 7b766266af08a6cef0487308e80b40d5d8069df7 perl-5.36.1.tar.xz
sha256 bd91217ea8a8c8b81f21ebbb6cefdf0d13ae532013f944cdece2cd51aef4b6a7 perl-5.36.1.tar.xz
# Hashes from: https://www.cpan.org/src/5.0/perl-5.36.2.tar.xz.{md5,sha1,sha256}.txt
md5 698ae4946b28e38a729916f04cc389a3 perl-5.36.2.tar.xz
sha1 9bd6e3f7c333e2e5f14c8650333fc29da3df2d90 perl-5.36.2.tar.xz
sha256 19445f09ea9f6ada33297010d5b76ac46be565568d1a4377a6bc736cd795a128 perl-5.36.2.tar.xz
# Hash from: https://github.com/arsv/perl-cross/releases/download/1.4.1/perl-cross-1.4.1.hash
sha256 3e14bb4f28c83586c668c5f9f6b4e57b138b4ec2fae0271086e29d4e352670ca perl-cross-1.4.1.tar.gz
# Hash from: https://github.com/arsv/perl-cross/releases/download/1.5.1/perl-cross-1.5.1.hash
sha256 35d859b49bab274021d8a61511fd39a70a58cb727223de5b54342898155cf5e0 perl-cross-1.5.1.tar.gz
# Locally calculated
sha256 dd90d4f42e4dcadf5a7c09eea0189d93c7b37ae560c91f0f6d5233ed3b9292a2 Artistic

4
package/perl/perl.mk
View File

@ -6,7 +6,7 @@
# When updating the version here, also update utils/scancpan
PERL_VERSION_MAJOR = 36
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).1
PERL_VERSION = 5.$(PERL_VERSION_MAJOR).2
PERL_SITE = https://www.cpan.org/src/5.0
PERL_SOURCE = perl-$(PERL_VERSION).tar.xz
PERL_LICENSE = Artistic or GPL-1.0+
@ -15,7 +15,7 @@ PERL_CPE_ID_VENDOR = perl
PERL_DEPENDENCIES = $(TARGET_NLS_DEPENDENCIES)
PERL_INSTALL_STAGING = YES
PERL_CROSS_VERSION = 1.4.1
PERL_CROSS_VERSION = 1.5.1
# DO NOT refactor with the github helper (the result is not the same)
PERL_CROSS_SITE = https://github.com/arsv/perl-cross/releases/download/$(PERL_CROSS_VERSION)
PERL_CROSS_SOURCE = perl-cross-$(PERL_CROSS_VERSION).tar.gz