linux/poky.git/meta/recipes-devtools/perl, branch kirkstone

perl: enable _GNU_SOURCE define via d_gnulibc

2025-05-16T15:58:06+00:00

This is needed to properly support memmem() and friends under musl as musl guards the declarations with _GNU_SOURCE define, and if the declarations are not present, gcc will issue warnings and generate assembly that assumes the functions return int (instead of e.g. void*), with catastrophic consequences at runtime. (From OE-Core rev: 79dc3f42958bfefe03a8240e2a57501c38d2bd3c) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 6422e62fbc5c65a2165a72c97c880cfa9a80e957) Signed-off-by: Peter Hurley Signed-off-by: Steve Sakoman

perl: patch CVE-2024-56406

2025-05-16T15:58:06+00:00

Pick patch mentioned in NVD links for this CVE. Tested by runniing ptest and CVE reproducer (before&after). Ptest fails on test dist/threads/t/join, however the same test also fails without this patch. (From OE-Core rev: 8e3c821e9ce8f3a9667847a284bc5a6f4973ea13) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

perl: ignore CVE-2023-47038

2025-04-04T15:42:47+00:00

Fix for this CVE was backported to 5.34.2 in https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010 This commit is listed in https://security-tracker.debian.org/tracker/CVE-2023-47038 (From OE-Core rev: 46fd9acd6b0e418009f4cec747ae82af60acbc6b) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

perl: ignore CVE-2023-47100

2024-04-19T11:50:38+00:00

CVE-2023-47100 is a duplicate of CVE-2023-47038. They have the same advertised fix commit, which has already been merged into the perl_5.34.3 sources used in kirkstone. (From OE-Core rev: 8df158f39f1eed1e3ae88ddf935c67e067b72525) Signed-off-by: Alex Stewart Signed-off-by: Steve Sakoman

perl: update 5.34.1 -> 5.34.3

2023-12-23T02:36:55+00:00

This includes security fix for CVE-2023-47038 Changes: https://metacpan.org/release/PEVANS/perl-5.34.3/changes (From OE-Core rev: d1bc5fb1d090cf93b9014a050b418499c0209080) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

perl: Fix CVE-2023-31486

2023-07-21T16:27:34+00:00

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. References: https://nvd.nist.gov/vuln/detail/CVE-2023-31486 Upstream patches: https://github.com/chansen/p5-http-tiny/commit/77f557ef84698efeb6eed04e4a9704eaf85b741d https://github.com/chansen/p5-http-tiny/commit/a22785783b17cbaa28afaee4a024d81a1903701d (From OE-Core rev: 5819c839e1de92ab7669a0d4997886d0306c4cc1) Signed-off-by: Soumya Signed-off-by: Steve Sakoman

perl: fix CVE-2023-31484

2023-06-14T14:16:59+00:00

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. (From OE-Core rev: b093db144b35e7c140ac830dbe67cabfaac69f73) Signed-off-by: Soumya Signed-off-by: Steve Sakoman

perl: don't install Makefile.old into perl-ptest

2022-07-25T14:11:46+00:00

We already exclude Makefile, makefile, and makefile.old from copy of the perl source tree that is used by perl-ptest, but Makefile.old is not being excluded. In a rebuild of perl with an existing source tree these files now exist but have build paths in. As they're backup files, they can just be excluded from the packages. Use range globs to clean up the expressions, and exclude Makefile.old. (From OE-Core rev: d6ec3784c530714182a1cf1ac693ca35ef0b4f57) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 30a99affca7930f7fe0ddeb016b6183240b5f13c) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

libmodule-build-perl: Use env utility to find perl interpreter

2022-07-25T14:11:46+00:00

Fixes ERROR: QA Issue: : /work/x86_64-linux/libmodule-build-perl-native/0.4231-r0/sysroot-destdir/work/x86_64-linux/libmodule-build-perl-native/0.4231-r0/recipe-sysroot-native/usr/bin/config_data maximum shebang size exceeded, the maximum size is 128. [shebang-size] (From OE-Core rev: 3829ac3bca34a1aa5c54ba1d24d23af7a6630215) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 54ecb2d3f2523293383103cbe590ebdd037ee483) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

liberror-perl: Update sstate/equiv versions to clean cache

2022-06-22T22:46:29+00:00

There are cached reproducibility issues on the autobuilder due to the PRServ sstate checksum issues, flush the bad data out the system by bumping the versions. (From OE-Core rev: b2d10487f80deb04a0893325a1ae79c8629a7655) Signed-off-by: Richard Purdie (cherry picked from commit b12e6cfe3bb34e426c8bb74183d041948cb2ed89) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie