1=encoding utf8 2 3=head1 NAME 4 5perl5163delta - what is new for perl v5.16.3 6 7=head1 DESCRIPTION 8 9This document describes differences between the 5.16.2 release and 10the 5.16.3 release. 11 12If you are upgrading from an earlier release such as 5.16.1, first read 13L<perl5162delta>, which describes differences between 5.16.1 and 145.16.2. 15 16=head1 Core Enhancements 17 18No changes since 5.16.0. 19 20=head1 Security 21 22This release contains one major and a number of minor security fixes. 23These latter are included mainly to allow the test suite to pass cleanly 24with the clang compiler's address sanitizer facility. 25 26=head2 CVE-2013-1667: memory exhaustion with arbitrary hash keys 27 28With a carefully crafted set of hash keys (for example arguments on a 29URL), it is possible to cause a hash to consume a large amount of memory 30and CPU, and thus possibly to achieve a Denial-of-Service. 31 32This problem has been fixed. 33 34=head2 wrap-around with IO on long strings 35 36Reading or writing strings greater than 2**31 bytes in size could segfault 37due to integer wraparound. 38 39This problem has been fixed. 40 41=head2 memory leak in Encode 42 43The UTF-8 encoding implementation in Encode.xs had a memory leak which has been 44fixed. 45 46=head1 Incompatible Changes 47 48There are no changes intentionally incompatible with 5.16.0. If any 49exist, they are bugs and reports are welcome. 50 51=head1 Deprecations 52 53There have been no deprecations since 5.16.0. 54 55=head1 Modules and Pragmata 56 57=head2 Updated Modules and Pragmata 58 59=over 4 60 61=item * 62 63L<Encode> has been upgraded from version 2.44 to version 2.44_01. 64 65=item * 66 67L<Module::CoreList> has been upgraded from version 2.76 to version 2.76_02. 68 69=item * 70 71L<XS::APItest> has been upgraded from version 0.38 to version 0.39. 72 73=back 74 75=head1 Known Problems 76 77None. 78 79=head1 Acknowledgements 80 81Perl 5.16.3 represents approximately 4 months of development since Perl 5.16.2 82and contains approximately 870 lines of changes across 39 files from 7 authors. 83 84Perl continues to flourish into its third decade thanks to a vibrant community 85of users and developers. The following people are known to have contributed the 86improvements that became Perl 5.16.3: 87 88Andy Dougherty, Chris 'BinGOs' Williams, Dave Rolsky, David Mitchell, Michael 89Schroeder, Ricardo Signes, Yves Orton. 90 91The list above is almost certainly incomplete as it is automatically generated 92from version control history. In particular, it does not include the names of 93the (very much appreciated) contributors who reported issues to the Perl bug 94tracker. 95 96For a more complete list of all of Perl's historical contributors, please see 97the F<AUTHORS> file in the Perl source distribution. 98 99=head1 Reporting Bugs 100 101If you find what you think is a bug, you might check the articles 102recently posted to the comp.lang.perl.misc newsgroup and the perl 103bug database at http://rt.perl.org/perlbug/ . There may also be 104information at http://www.perl.org/ , the Perl Home Page. 105 106If you believe you have an unreported bug, please run the L<perlbug> 107program included with your release. Be sure to trim your bug down 108to a tiny but sufficient test case. Your bug report, along with the 109output of C<perl -V>, will be sent off to perlbug@perl.org to be 110analysed by the Perl porting team. 111 112If the bug you are reporting has security implications, which make it 113inappropriate to send to a publicly archived mailing list, then please 114send it to perl5-security-report@perl.org. This points to a closed 115subscription unarchived mailing list, which includes all the core 116committers, who will be able to help assess the impact of issues, figure 117out a resolution, and help co-ordinate the release of patches to 118mitigate or fix the problem across all platforms on which Perl is 119supported. Please only use this address for security issues in the Perl 120core, not for modules independently distributed on CPAN. 121 122=head1 SEE ALSO 123 124The F<Changes> file for an explanation of how to view exhaustive details 125on what changed. 126 127The F<INSTALL> file for how to build Perl. 128 129The F<README> file for general stuff. 130 131The F<Artistic> and F<Copying> files for copyright information. 132 133=cut 134