* [Buildroot] [PATCH] package/perl: bump to version 5.42.0
@ 2025-12-12 8:54 Francois Perrad via buildroot
2025-12-13 15:58 ` Julien Olivain via buildroot
0 siblings, 1 reply; 4+ messages in thread
From: Francois Perrad via buildroot @ 2025-12-12 8:54 UTC (permalink / raw)
To: buildroot
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
---
package/perl/Config.in | 2 +-
package/perl/perl.hash | 16 ++++++++--------
package/perl/perl.mk | 6 +++---
utils/scancpan | 8 ++++----
4 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/package/perl/Config.in b/package/perl/Config.in
index 0ead1c4a4..6c9bf1e0d 100644
--- a/package/perl/Config.in
+++ b/package/perl/Config.in
@@ -6,7 +6,7 @@ config BR2_PACKAGE_PERL
An interpreted scripting language, known among some as
"Unix's Swiss Army Chainsaw".
- http://www.perl.org/
+ https://www.perl.org/
if BR2_PACKAGE_PERL
diff --git a/package/perl/perl.hash b/package/perl/perl.hash
index d581054bb..991bb41f1 100644
--- a/package/perl/perl.hash
+++ b/package/perl/perl.hash
@@ -1,12 +1,12 @@
-# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.2.tar.xz.{md5,sha1,sha256}.txt
-md5 9ad7a269dc4053cdbeecd4fde444291b perl-5.40.2.tar.xz
-sha1 661fe9ee085ca0aec8ddd65e055bee922af12663 perl-5.40.2.tar.xz
-sha256 0551c717458e703ef7972307ab19385edfa231198d88998df74e12226abf563b perl-5.40.2.tar.xz
+# Hashes from: https://www.cpan.org/src/5.0/perl-5.42.0.tar.xz.{md5,sha1,sha256}.txt
+md5 7a6950a9f12d01eb96a9d2ed2f4e0072 perl-5.42.0.tar.xz
+sha1 3b557f28dcb412b115d9628c37fc94b2fda08384 perl-5.42.0.tar.xz
+sha256 73cf6cc1ea2b2b1c110a18c14bbbc73a362073003893ffcedc26d22ebdbdd0c3 perl-5.42.0.tar.xz
-# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.2/perl-cross-1.6.2.hash
-sha256 131f7496152ee32067dbac2bc9b44b2f582fc778140e545701b3b2faee782f1d perl-cross-1.6.2.tar.gz
+# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.3/perl-cross-1.6.3.hash
+sha256 cd57d8f8017727dc7e19cca55e1e9f22664edecf6c9f04c3515ecc13fd88e4f3 perl-cross-1.6.3.tar.gz
# Locally calculated
sha256 dd90d4f42e4dcadf5a7c09eea0189d93c7b37ae560c91f0f6d5233ed3b9292a2 Artistic
-sha256 d77d235e41d54594865151f4751e835c5a82322b0e87ace266567c3391a4b912 Copying
-sha256 af805523b88a8ebb60afc009caaf247a498208502f7b8b3d9d3e329fcfb1dc3b README
+sha256 8979e6dd61852041643c5c5c40ea63b2bd1b438a67d114e62cbaef808c514315 Copying
+sha256 189e9d6ac7743ed4e832f14c9edb6f782c92d8868b447fa2684f7fe5a81465c1 README
diff --git a/package/perl/perl.mk b/package/perl/perl.mk
index 34abb734d..c31a368b7 100644
--- a/package/perl/perl.mk
+++ b/package/perl/perl.mk
@@ -5,8 +5,8 @@
################################################################################
# When updating the version here, also update utils/scancpan
-PERL_VERSION_MAJOR = 40
-PERL_VERSION = 5.$(PERL_VERSION_MAJOR).2
+PERL_VERSION_MAJOR = 42
+PERL_VERSION = 5.$(PERL_VERSION_MAJOR).0
PERL_SITE = https://www.cpan.org/src/5.0
PERL_SOURCE = perl-$(PERL_VERSION).tar.xz
PERL_LICENSE = Artistic or GPL-1.0+
@@ -15,7 +15,7 @@ PERL_CPE_ID_VENDOR = perl
PERL_DEPENDENCIES = $(TARGET_NLS_DEPENDENCIES)
PERL_INSTALL_STAGING = YES
-PERL_CROSS_VERSION = 1.6.2
+PERL_CROSS_VERSION = 1.6.3
# DO NOT refactor with the github helper (the result is not the same)
PERL_CROSS_SITE = https://github.com/arsv/perl-cross/releases/download/$(PERL_CROSS_VERSION)
PERL_CROSS_SOURCE = perl-cross-$(PERL_CROSS_VERSION).tar.gz
diff --git a/utils/scancpan b/utils/scancpan
index e7739a8ad..276c79b4e 100755
--- a/utils/scancpan
+++ b/utils/scancpan
@@ -488,9 +488,9 @@ use Digest::SHA qw(sha256_hex);
use Text::Wrap;
$Text::Wrap::columns = 62;
-# Below, 5.036 should be aligned with the version of perl actually
+# Below, 5.042 should be aligned with the version of perl actually
# bundled in Buildroot:
-die <<"MSG" if $] < 5.036;
+die <<"MSG" if $] < 5.042;
This script needs a host perl with the same major version as Buildroot target perl.
Your current host perl is:
@@ -498,7 +498,7 @@ Your current host perl is:
version $]
You may install a local one by running:
- perlbrew install perl-5.36.0
+ perlbrew install perl-5.42.0
MSG
my ($help, $man, $quiet, $force, $recommend, $test, $host);
@@ -967,7 +967,7 @@ in order to work with the right CoreList data.
=head1 LICENSE
-Copyright (C) 2013-2023 by Francois Perrad <francois.perrad@gadz.org>
+Copyright (C) 2013-2025 by Francois Perrad <francois.perrad@gadz.org>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
--
2.43.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH] package/perl: bump to version 5.42.0
2025-12-12 8:54 [Buildroot] [PATCH] package/perl: bump to version 5.42.0 Francois Perrad via buildroot
@ 2025-12-13 15:58 ` Julien Olivain via buildroot
0 siblings, 0 replies; 4+ messages in thread
From: Julien Olivain via buildroot @ 2025-12-13 15:58 UTC (permalink / raw)
To: Francois Perrad; +Cc: buildroot
Hi Francois,
Thanks for the patch.
On 12/12/2025 09:54, Francois Perrad via buildroot wrote:
> Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Looking at the release notes of this version at:
https://perldoc.perl.org/5.42.0/perldelta
I see that this new version fixes:
https://www.cve.org/CVERecord?id=CVE-2025-40909
The other CVE-2024-56406 mentioned was fixed in:
https://gitlab.com/buildroot.org/buildroot/-/commit/164c84ee9b820f5b21e79b4d52c07a613925d3f2
Could you confirm that CVE-2025-40909 applies to Buildroot?
If it does apply, could you send an updated patch marked as
"security bump", including the links release notes and CVE,
please?
Best regards,
Julien.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH] package/perl: bump to version 5.42.0
@ 2025-12-19 6:45 Francois Perrad via buildroot
2025-12-19 18:02 ` Julien Olivain via buildroot
0 siblings, 1 reply; 4+ messages in thread
From: Francois Perrad via buildroot @ 2025-12-19 6:45 UTC (permalink / raw)
To: buildroot
Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
---
package/perl/Config.in | 2 +-
package/perl/perl.hash | 12 ++++++------
package/perl/perl.mk | 5 ++---
utils/scancpan | 8 ++++----
4 files changed, 13 insertions(+), 14 deletions(-)
diff --git a/package/perl/Config.in b/package/perl/Config.in
index 0ead1c4a4..6c9bf1e0d 100644
--- a/package/perl/Config.in
+++ b/package/perl/Config.in
@@ -6,7 +6,7 @@ config BR2_PACKAGE_PERL
An interpreted scripting language, known among some as
"Unix's Swiss Army Chainsaw".
- http://www.perl.org/
+ https://www.perl.org/
if BR2_PACKAGE_PERL
diff --git a/package/perl/perl.hash b/package/perl/perl.hash
index 0035c448c..3aefdd05b 100644
--- a/package/perl/perl.hash
+++ b/package/perl/perl.hash
@@ -1,12 +1,12 @@
-# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.3.tar.xz.{md5,sha1,sha256}.txt
-md5 f526a5975a7cc6f53f28326437b1eb39 perl-5.40.3.tar.xz
-sha1 7c95250ceff00d649c1f5afa511987a2c4da61d3 perl-5.40.3.tar.xz
-sha256 65f63b4763ab6cb9bb3d5731dd10369e1705be3c59be9847d453eb60b349ab43 perl-5.40.3.tar.xz
+# Hashes from: https://www.cpan.org/src/5.0/perl-5.42.0.tar.xz.{md5,sha1,sha256}.txt
+md5 7a6950a9f12d01eb96a9d2ed2f4e0072 perl-5.42.0.tar.xz
+sha1 3b557f28dcb412b115d9628c37fc94b2fda08384 perl-5.42.0.tar.xz
+sha256 73cf6cc1ea2b2b1c110a18c14bbbc73a362073003893ffcedc26d22ebdbdd0c3 perl-5.42.0.tar.xz
# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.3/perl-cross-1.6.3.hash
sha256 cd57d8f8017727dc7e19cca55e1e9f22664edecf6c9f04c3515ecc13fd88e4f3 perl-cross-1.6.3.tar.gz
# Locally calculated
sha256 dd90d4f42e4dcadf5a7c09eea0189d93c7b37ae560c91f0f6d5233ed3b9292a2 Artistic
-sha256 d77d235e41d54594865151f4751e835c5a82322b0e87ace266567c3391a4b912 Copying
-sha256 af805523b88a8ebb60afc009caaf247a498208502f7b8b3d9d3e329fcfb1dc3b README
+sha256 8979e6dd61852041643c5c5c40ea63b2bd1b438a67d114e62cbaef808c514315 Copying
+sha256 189e9d6ac7743ed4e832f14c9edb6f782c92d8868b447fa2684f7fe5a81465c1 README
diff --git a/package/perl/perl.mk b/package/perl/perl.mk
index a301b93e4..c31a368b7 100644
--- a/package/perl/perl.mk
+++ b/package/perl/perl.mk
@@ -5,8 +5,8 @@
################################################################################
# When updating the version here, also update utils/scancpan
-PERL_VERSION_MAJOR = 40
-PERL_VERSION = 5.$(PERL_VERSION_MAJOR).3
+PERL_VERSION_MAJOR = 42
+PERL_VERSION = 5.$(PERL_VERSION_MAJOR).0
PERL_SITE = https://www.cpan.org/src/5.0
PERL_SOURCE = perl-$(PERL_VERSION).tar.xz
PERL_LICENSE = Artistic or GPL-1.0+
@@ -28,7 +28,6 @@ PERL_EXTRA_DOWNLOADS = $(PERL_CROSS_SITE)/$(PERL_CROSS_SOURCE)
define PERL_CROSS_EXTRACT
$(call suitable-extractor,$(PERL_CROSS_SOURCE)) $(PERL_DL_DIR)/$(PERL_CROSS_SOURCE) | \
$(TAR) --strip-components=1 -C $(@D) $(TAR_OPTIONS) -
- mv $(@D)/cnf/diffs/perl5-5.40.2 $(@D)/cnf/diffs/perl5-5.40.3
endef
PERL_POST_EXTRACT_HOOKS += PERL_CROSS_EXTRACT
diff --git a/utils/scancpan b/utils/scancpan
index e7739a8ad..276c79b4e 100755
--- a/utils/scancpan
+++ b/utils/scancpan
@@ -488,9 +488,9 @@ use Digest::SHA qw(sha256_hex);
use Text::Wrap;
$Text::Wrap::columns = 62;
-# Below, 5.036 should be aligned with the version of perl actually
+# Below, 5.042 should be aligned with the version of perl actually
# bundled in Buildroot:
-die <<"MSG" if $] < 5.036;
+die <<"MSG" if $] < 5.042;
This script needs a host perl with the same major version as Buildroot target perl.
Your current host perl is:
@@ -498,7 +498,7 @@ Your current host perl is:
version $]
You may install a local one by running:
- perlbrew install perl-5.36.0
+ perlbrew install perl-5.42.0
MSG
my ($help, $man, $quiet, $force, $recommend, $test, $host);
@@ -967,7 +967,7 @@ in order to work with the right CoreList data.
=head1 LICENSE
-Copyright (C) 2013-2023 by Francois Perrad <francois.perrad@gadz.org>
+Copyright (C) 2013-2025 by Francois Perrad <francois.perrad@gadz.org>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
--
2.43.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [Buildroot] [PATCH] package/perl: bump to version 5.42.0
2025-12-19 6:45 Francois Perrad via buildroot
@ 2025-12-19 18:02 ` Julien Olivain via buildroot
0 siblings, 0 replies; 4+ messages in thread
From: Julien Olivain via buildroot @ 2025-12-19 18:02 UTC (permalink / raw)
To: Francois Perrad; +Cc: buildroot
On 19/12/2025 07:45, Francois Perrad via buildroot wrote:
> Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Applied to master, thanks.
For info, I added info in the commit log. See:
https://gitlab.com/buildroot.org/buildroot/-/commit/11d6d10debc81a64de901ec0217b8103c0f366b0
Best regards,
Julien.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2025-12-19 18:02 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-12-12 8:54 [Buildroot] [PATCH] package/perl: bump to version 5.42.0 Francois Perrad via buildroot
2025-12-13 15:58 ` Julien Olivain via buildroot
-- strict thread matches above, loose matches on Subject: below --
2025-12-19 6:45 Francois Perrad via buildroot
2025-12-19 18:02 ` Julien Olivain via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.