DEV Community

Gabor Szabo
Gabor Szabo

Posted on • Originally published at perlweekly.com

Perl 🐪 Weekly #716 - CVE in Perl

Originally published at Perl Weekly 716

Hi there,

A few days ago, I wrote a blog post about CVEs. It was my first time looking at CVEs closely. Then I came across a reddit post discussing CVE-2024-56406. I am a bit confused, was this fixed in Perl v5.38.4 or Perl v5.40.2?

That said, it gave me something fun to dig into. I already know what I'll be doing next. During my search, I discovered the, CPAN Security Group, a community effort dedicated to handling security incidents on CPAN. Pretty cool!

Also the Perl Toolchain Summit 2025 needs our support as mentioned in the blog post. I'm happy to see my current employer, Oleeo, listed as one of the In-Kind Sponsors. Now, I'm curious to find out who the lucky team member is that gets to attend!. It's happening this year from Thursday May 1st to Sunday May 4th 2025.

I remember back in 2019, the summit was held so close to me, in Marlow, if I recall correctly. I've said it before and I'll say it again, I have to get involved in the MetaCPAN project. The main blocker last time was setting up the local development environment. I spoke to someone about it, can't remember who, and he mentioned the team was working on simplifying the setup process to make it easier for contributors. I haven't had a chance to check the current status, but I'm adding it to my ever-growing TODO list.

Happy Monday and enjoy the rest of the newsletter!

--
Your editor: Mohammad Sajid Anwar.

Announcements

This week in PSC (186) | 2025-04-10

Preparation of next big release is on the track. Perl logo is also discussed.


Articles

Reaching 1.0

With the Harmonograph you can create beautiful and individual images within a few clicks. It's painting by pendulum.

CVE in Perl

What is CVE? Well the post answers some of the most commonly asked questions with regard to CVE and in particular from Perl point of view.

CPAN Scan

Nice colourful website showing recent released Perl modules with a short abstracts.

Multiple embedded Perl instances in multithreaded environment

Currently I am developing an ASP.NET application that for legacy reasons needs to execute some Perl scripts. For this I wrote a small C++ library that uses the embedded Perl API.

Enhancing Your MIDI Devices: Round II

The second post in the series talking about MIDI devices that can be enhanced to function in different ways besides just triggering a single note per key (or pad) press.

Writing a 1GB file in perl

C is stranger to me now. This wws a refresher, peeking inside C.


CPAN

Introducing DBIx::Class::ResultSet::PrettyPrint

For all DBIC fans, this is going to be very handy tool in your toolbox. Find out more about it in the post.

Time::Piece v1.36

Parsing speed up for strftime and strptime.

Scalar::List::Utils v1.69

Always allow isvstring to be exported even on Perl 5.6.

Math::BigInt v2.005002

Fix the handling of read-only objects in bblsft() and bbrsft() in Math::BigFloat and Math::BigRat.


The Weekly Challenge

The Weekly Challenge by Mohammad Sajid Anwar will help you step out of your comfort-zone. You can even win prize money of $50 by participating in the weekly challenge. We pick one champion at the end of the month from among all of the contributors during the month, thanks to the sponsor Lance Wicks.

The Weekly Challenge - 317

Welcome to a new week with a couple of fun tasks "Acronyms" and "Friendly Strings". If you are new to the weekly challenge then why not join us and have fun every week. For more information, please read the FAQ.

RECAP - The Weekly Challenge - 316

Enjoy a quick recap of last week's contributions by Team PWC dealing with the "Circular" and "Subsequence" tasks in Perl and Raku. You will find plenty of solutions to keep you busy.

Going Around in Sequential Circles

How often you see the do {} for construct? See it yourself in action. Great work.

TWC316

Usual suspect, map, index, split, join and sort are in the act together. Clever use, great work.

Subcircular

Don't underestimate the power of substr(). Is it same as in Perl? Find out yourself.

Not Gonna Reference John

Welcome back to blogging, hope to see more in coming weeks. Thanks for sharing knowledge with us.

Perl Weekly Challenge: Week 316

Another comeback from holiday as expected with a bang. Enjoy Perl and Raku together in one place.

Regular Sequences

Serious regex in play, so take your own time to explore. The story made it easy to follow, well done.

coming back from PostgreSQL OpenDay

Looks like, this is the comeback week. Another member back in action, only Raku this week. Keep sharing the knowledge.

Perl Weekly Challenge 316

Ideal playground for our in-house one-liner master. I found the regex very special. I have to try it this, very tempting.

Ring-a-ring-a-roses or a sack race?

Here is the power of CPAN making the solution compact and easy to follow. Keep it up great work.

The Sequence Goes Round and Round…

Here is the musical blog post for you, highly recommended. What a comeback, thanks.

Tricky characters

Innocent unless proved guilty approach, why? DIY to find the reason.

The Weekly Challenge #316

Simple for-loop and substr is what we need to get the job done, short and sweet, well done.

Circular Reasoning

Good old friend, Javascript, made it to the discussion table. I wonder how do you test it?

Sub circular

I love the color scheme of Python code in the post. It makes it very attractive. Two straight forward solutions in Perl and Python.


Rakudo

2025.14 Diving


Other

git refs...

This a quick introduction to git refs, if you use git for version control.


Weekly collections

NICEPERL's lists

Great CPAN modules released last week.


Events

German Perl/Raku Workshop Conference 2025

Munich, Germany

Paris.pm monthly meeting

Paris, France

Paris.pm monthly meeting

Paris, France

The Perl and Raku Conference 2025

Greenville, South Carolina, USA


You joined the Perl Weekly to get weekly e-mails about the Perl programming language and related topics.

Want to see more? See the archives of all the issues.

Not yet subscribed to the newsletter? Join us free of charge!

(C) Copyright Gabor Szabo
The articles are copyright the respective authors.

Top comments (0)