Branch: refs/heads/maint-5.40
Home: https://github.com/Perl/perl5
Commit: 84be063eb88c5b1dd26cb4c418b94d39e60b7049
https://github.com/Perl/perl5/commit/84be063eb88c5b1dd26cb4c418b94d39e60b7049
Author: Leon Timmermans <faw...@gmail.com>
Date: 2025-05-31 (Sat, 31 May 2025)
Changed paths:
M Configure
M Cross/config.sh-arm-linux
M Cross/config.sh-arm-linux-n770
M Porting/Glossary
M Porting/config.sh
M config_h.SH
M configure.com
M plan9/config_sh.sample
M sv.c
M t/op/threads-dirh.t
M win32/config.gc
M win32/config.vc
Log Message:
-----------
CVE-2025-40909: Clone dirhandles without fchdir
This uses fdopendir and dup to dirhandles. This means it won't change
working directory during thread cloning, which prevents race conditions
that can happen if a third thread is active at the same time.
(cherry picked from commit 918bfff86ca8d6d4e4ec5b30994451e0bd74aba9)
To unsubscribe from these emails, change your notification settings at
https://github.com/Perl/perl5/settings/notifications
