mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-08-27 02:34:53 +00:00
d59aeb80e5
Perl ships with some CPAN modules vendored as "dual-life", this commit
inject updated versions certain modules directly from CPAN rather than
applying patches from upstream, as they can be tricky to maintain.
It also includes a patch for CVE-2026-8376 which affects 32-bit
platforms.
- perl: CVE-2026-8376
5e7f119eb2
- HTTP-Tiny 0.094: CVE-2026-7010
https://metacpan.org/release/HAARG/HTTP-Tiny-0.094/changes
- Compress-Raw-Zlib 2.222: CVE-2026-3381, CVE-2026-4176
https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.222/changes
- Compress-Raw-Bzip2 2.218
https://metacpan.org/release/PMQS/Compress-Raw-Bzip2-2.218/changes
- IO-Compress 2.220: CVE-2026-48959, CVE-2026-48961, CVE-2026-48962
https://metacpan.org/release/PMQS/IO-Compress-2.220/changes
- Archive-Tar 3.12: CVE-2026-42496, CVE-2026-42497, CVE-2026-9538
https://metacpan.org/release/BINGOS/Archive-Tar-3.12/changes
Assisted-by: Codex (OpenAI)
Signed-off-by: Stig Palmquist <git@stig.io>