PaulHowarth/Blog/2017-08-17

Thursday 17th August 2017

Local Packages

  • Updated perl-DBI to 1.637:

    • Fix use of externally controlled format string (CWE-134) (GH#44); this could cause a crash if, for example, a db error contained a %

    • Fix extension detection for DBD::File related drivers

    • Fix tests for perl without dot in @INC (CPAN RT#120443)

    • Fix loss of error message on parent handle (GH#34)

    • Fix disappearing $_ inside callbacks (GH#47)

    • Allow objects to be used as passwords without throwing an error (GH#40)

    • Allow $sth NAME_* attributes to be set from Perl code (GH#45)

    • Added support for DBD::XMLSimple (GH#38)

    • Documentation updates:

      • Improve examples using eval to be more correct (GH#39)

      • Add cautionary note to prepare_cached docs re refs in %attr (GH#46)

      • Small POD changes (Getting Help -> Online) (GH#33)

      • Add links to more module names and fix typo (GH#43)

      • Typo fix (GH#37)

  • Updated perl-JSON-XS to 3.04:

    • Change exponential realloc algorithm on encoding and string decoding to be really exponential (this helps slow/debugging allocators such as libumem)

    • String encoding would needlessly over-allocate output space
    • Be very paranoid about extending buffer lengths and croak if buffers get too large, which might (or might not) improve security

    • Add cbor-packed type to json_xs

    • Switch from YAML to YAML::XS in json_xs, as YAML is way too buggy and outdated

  • Updated perl-Text-Diff to 1.45:

Recent