CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

lang/perl5.405.40.5

Practical Extraction and Report Language

3
unaddressed
0
VuXML only, still affected
1
fixed
Maintainer
mat@FreeBSD.org
Packages
perl5.40 5.40.5
Upstream
up to date
CPE
perl:perl from the port
WWW
https://www.perl.org/
Links
cgit · VuXML

Unaddressed (3) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2026-83769.82026-05-26Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated…
CVE-2026-132219.12026-07-13Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of m…
CVE-2026-574328.42026-07-13Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap …

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range this version has left.

Commits (14)

Mathieu Arnold (mat) · 5.40.5
*: pet portfmt
0768760099
Mathieu Arnold (mat)
lang/perl5.40: update to 5.40.5

Changes:	https://metacpan.org/release/SHAY/perl-5.40.5/view/pod/perldelta.pod
Security:	CVE-2025-40909, CVE-2026-57432, CVE-2026-8376, CVE-2026-13221
0759278081
Rene Ladan (rene)
all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office
2a7c056120
Mathieu Arnold (mat)
lang/perl5.40: update to 5.40.4

Security:	CVE-2026-4176, CVE-2026-3381, CVE-2026-27171
Changes:	https://metacpan.org/release/SHAY/perl-5.40.4/view/pod/perldelta.pod
073954908f
Mathieu Arnold (mat)
lang/perl5.40: deprecate "old" Perl
07160590b5
Mathieu Arnold (mat)
lang/perl5.40: update to 5.40.3

Changes:	https://metacpan.org/release/SHAY/perl-5.40.3/view/pod/perldelta.pod
Security:	CVE-2025-40909
07160040fe
Mathieu Arnold (mat)
lang/perl5*: first attempt of reporting local patches
07055309ea
Mathieu Arnold (mat)
lang/perl5.40: silence Getopt::Long duplicate‐spec warning in json_pp

PR:	286820
070552732a
Mathieu Arnold (mat)
lang/perl5.40: update to 5.40.2
0702522d9f
Yasuhiro Kimura (yasu)
lang/perl5.40: Update to 5.40.1

ChangeLog:	https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod
PR:		284182
Approved by:	maintainer timeout
b31003d07b
Mathieu Arnold (mat)
lang/perl5*: remove calls to makewhatis

The @*exec macros have issues when being used when used with `pkg -r`,
as %D does not account for the root directory. As we have a periodic
task updating the makewhatis databases, and perl ports are the only ones
actually doing that, probably for some long lost historic reason, it is
easier to let that periodic task do its job.

PR:		280458
Discussed with:	bapt
Reported by:	Siva Mahadevan
06745788d4
Mathieu Arnold (mat)
lang/perl5.40: update to 5.40.0

Changes:	https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod
06672786b3
Mathieu Arnold (mat)
lang/perl5.40: update to -RC2
0666403d98
Mathieu Arnold (mat)
lang/perl5.40: add Perl 5.40.0-RC1

Changes:	https://metacpan.org/release/HAARG/perl-5.40.0-RC1/view/pod/perldelta.pod
0665212028