Issue #716 - 2025-04-14 - CVE in Perl

latest | archive | edited by Mohammad Sajid Anwar
This edition was made possible by the supporters of our cause.
Don't miss the next issue!

Hi there,

A few days ago, I wrote a blog post about CVEs. It was my first time looking at CVEs closely. Then I came across a reddit post discussing CVE-2024-56406. I am a bit confused, was this fixed in Perl v5.38.4 or Perl v5.40.2?

That said, it gave me something fun to dig into. I already know what I'll be doing next. During my search, I discovered the, CPAN Security Group, a community effort dedicated to handling security incidents on CPAN. Pretty cool!

Also the Perl Toolchain Summit 2025 needs our support as mentioned in the blog post. I'm happy to see my current employer, Oleeo, listed as one of the In-Kind Sponsors. Now, I'm curious to find out who the lucky team member is that gets to attend!. It's happening this year from Thursday May 1st to Sunday May 4th 2025.

I remember back in 2019, the summit was held so close to me, in Marlow, if I recall correctly. I've said it before and I'll say it again, I have to get involved in the MetaCPAN project. The main blocker last time was setting up the local development environment. I spoke to someone about it, can't remember who, and he mentioned the team was working on simplifying the setup process to make it easier for contributors. I haven't had a chance to check the current status, but I'm adding it to my ever-growing TODO list.

Happy Monday and enjoy the rest of the newsletter!

Mohammad Sajid Anwar


Announcements

This week in PSC (186) | 2025-04-10

Preparation of next big release is on the track. Perl logo is also discussed.


Articles

Reaching 1.0

by Herbert Breunung (LICHTKIND)

With the Harmonograph you can create beautiful and individual images within a few clicks. It's painting by pendulum.

CVE in Perl

by Mohammad Sajid Anwar (MANWAR)

What is CVE? Well the post answers some of the most commonly asked questions with regard to CVE and in particular from Perl point of view.

CPAN Scan

Nice colourful website showing recent released Perl modules with a short abstracts.

Multiple embedded Perl instances in multithreaded environment

by Ted James

Currently I am developing an ASP.NET application that for legacy reasons needs to execute some Perl scripts. For this I wrote a small C++ library that uses the embedded Perl API.

Enhancing Your MIDI Devices: Round II

by Gene Boggs (GENE)

The second post in the series talking about MIDI devices that can be enhanced to function in different ways besides just triggering a single note per key (or pad) press.

Writing a 1GB file in perl

by kanliot

C is stranger to me now. This wws a refresher, peeking inside C.


CPAN

Introducing DBIx::Class::ResultSet::PrettyPrint

by Paul Cochrane (PTC)

For all DBIC fans, this is going to be very handy tool in your toolbox. Find out more about it in the post.

Time::Piece v1.36

by Samuel Smith

Parsing speed up for strftime and strptime.

Scalar::List::Utils v1.69

by Paul Evans (PEVANS)

Always allow `isvstring` to be exported even on Perl 5.6.

Math::BigInt v2.005002

by Peter John Acklam (PJACKLAM)

Fix the handling of read-only objects in bblsft() and bbrsft() in Math::BigFloat and Math::BigRat.


The Weekly Challenge

The Weekly Challenge by Mohammad Sajid Anwar will help you step out of your comfort-zone. You can even win prize money of $50 by participating in the weekly challenge. We pick one champion at the end of the month from among all of the contributors during the month, thanks to the sponsor Lance Wicks.

The Weekly Challenge - 317

by Mohammad Sajid Anwar (MANWAR)

Welcome to a new week with a couple of fun tasks "Acronyms" and "Friendly Strings". If you are new to the weekly challenge then why not join us and have fun every week. For more information, please read the FAQ.

RECAP - The Weekly Challenge - 316

by Mohammad Sajid Anwar (MANWAR)

Enjoy a quick recap of last week's contributions by Team PWC dealing with the "Circular" and "Subsequence" tasks in Perl and Raku. You will find plenty of solutions to keep you busy.

Going Around in Sequential Circles

by Adam Russell

How often you see the do {} for construct? See it yourself in action. Great work.

TWC316

by Ali Moradi

Usual suspect, map, index, split, join and sort are in the act together. Clever use, great work.

Subcircular

by Arne Sommer

Don't underestimate the power of substr(). Is it same as in Perl? Find out yourself.

Not Gonna Reference John

by Dave Jacoby (JACOBY)

Welcome back to blogging, hope to see more in coming weeks. Thanks for sharing knowledge with us.

Perl Weekly Challenge: Week 316

by Jaldhar H. Vyas

Another comeback from holiday as expected with a bang. Enjoy Perl and Raku together in one place.

Regular Sequences

by Jorg Sommrey

Serious regex in play, so take your own time to explore. The story made it easy to follow, well done.

coming back from PostgreSQL OpenDay

by Luca Ferrari

Looks like, this is the comeback week. Another member back in action, only Raku this week. Keep sharing the knowledge.

Perl Weekly Challenge 316

by W Luis Mochan

Ideal playground for our in-house one-liner master. I found the regex very special. I have to try it this, very tempting.

Ring-a-ring-a-roses or a sack race?

by Matthias Muth

Here is the power of CPAN making the solution compact and easy to follow. Keep it up great work.

The Sequence Goes Round and Round…

by Packy Anderson (PACKY)

Here is the musical blog post for you, highly recommended. What a comeback, thanks.

Tricky characters

by Peter Campbell Smith

Innocent unless proved guilty approach, why? DIY to find the reason.

The Weekly Challenge #316

by Robbie Hatley

Simple for-loop and substr is what we need to get the job done, short and sweet, well done.

Circular Reasoning

by Roger Bell West (FIREDRAKE)

Good old friend, Javascript, made it to the discussion table. I wonder how do you test it?

Sub circular

by Simon Green

I love the color scheme of Python code in the post. It makes it very attractive. Two straight forward solutions in Perl and Python.


Rakudo

2025.14 Diving

by Elizabeth Mattijsen (ELIZABETH)


Other

git refs...

by Mohammad Sajid Anwar (MANWAR)

This a quick introduction to git refs, if you use git for version control.


Weekly collections

Events

Paris.pm monthly meeting

Paris, France

Paris.pm monthly meeting

Paris, France

The Perl and Raku Conference 2025

Greenville, South Carolina, USA



You know, you could get the Perl Weekly right in your mailbox. Every Week.
Free of charge!

Just ONE e-mail each Monday. Easy to unsubscribe. No spam. Your e-mail address is safe.
Perl Weekly on Twitter RSS Feed of the Perl Weekly. Updated once a week