Date: Tuesday December 04, 2018 @ 22:13 Author: argrath Update of /cvsroot/perldocjp/docs/perl/5.28.1 In directory sf-cvs:/tmp/cvs-serv88485/perl/5.28.1 Added Files: perl5281delta.pod Log Message: 5.28.1/perl5281delta =================================================================== File: perl5281delta.pod Status: Up-to-date Working revision: 1.1 Tue Dec 4 13:13:28 2018 Repository revision: 1.1 /cvsroot/perldocjp/docs/perl/5.28.1/perl5281delta.pod,v Existing Tags: No Tags Exist -------------- next part -------------- Index: docs/perl/5.28.1/perl5281delta.pod diff -u /dev/null docs/perl/5.28.1/perl5281delta.pod:1.1 --- /dev/null Tue Dec 4 22:13:28 2018 +++ docs/perl/5.28.1/perl5281delta.pod Tue Dec 4 22:13:28 2018 @@ -0,0 +1,352 @@ + +=encoding euc-jp + +=head1 NAME + +=begin original + +perldelta - what is new for perl v5.28.1 + +=end original + +perl5281delta - perl v5.28.1 ¤Ç¤ÎÊѹ¹ÅÀ + +=head1 DESCRIPTION + +=begin original + +This document describes differences between the 5.28.0 release and the 5.28.1 +release. + +=end original + +¤³¤Îʸ½ñ¤Ï 5.28.0 ¥ê¥ê¡¼¥¹¤È 5.28.1 ¥ê¥ê¡¼¥¹¤ÎÊѹ¹ÅÀ¤òµ½Ò¤·¤Æ¤¤¤Þ¤¹¡£ + +=begin original + +If you are upgrading from an earlier release such as 5.26.0, first read +L<perl5280delta>, which describes differences between 5.26.0 and 5.28.0. + +=end original + +5.26.0 ¤Î¤è¤¦¤Ê°ÊÁ°¤Î¥ê¥ê¡¼¥¹¤«¤é¹¹¿·¤¹¤ë¾ì¹ç¤Ï¡¢¤Þ¤º 5.26.0 ¤È +5.28.0 ¤Î°ã¤¤¤Ë¤Ä¤¤¤Æµ½Ò¤·¤Æ¤¤¤ë L<perl5280delta> ¤òÆɤó¤Ç¤¯¤À¤µ¤¤¡£ + +=head1 Security + +(¥»¥¥å¥ê¥Æ¥£) + +=head2 [CVE-2018-18311] Integer overflow leading to buffer overflow and segmentation fault + +=begin original + +Integer arithmetic in C<Perl_my_setenv()> could wrap when the combined length +of the environment variable name and value exceeded around 0x7fffffff. This +could lead to writing beyond the end of an allocated buffer with attacker +supplied data. + +=end original + +C<Perl_my_setenv()> ¤ÎÀ°¿ô±é»»¤Ï¡¢´Ä¶ÊÑ¿ô̾¤ÈÃͤÎŤµ¤Î¹ç·×¤¬ +0x7fffffff ¤ò±Û¤¨¤¿¤È¤¤Ë²ó¤ê¹þ¤à²ÄǽÀ¤¬¤¢¤ê¤Þ¤·¤¿¡£ +¤³¤ì¤Ë¤è¤ê¡¢¹¶·â¼Ô¤¬Ä󶡤·¤¿¥Ç¡¼¥¿¤¬³ä¤êÅö¤Æ¤é¤ì¤¿¥Ð¥Ã¥Õ¥¡¤ÎËöÈø¤ò±Û¤¨¤¿ +½ñ¤¹þ¤ß¤ò°ú¤µ¯¤³¤¹¤³¤È¤¬¤¢¤ê¤Þ¤·¤¿¡£ + +L<[perl #133204]|https://rt.perl.org/Ticket/Display.html?id=133204> + +=head2 [CVE-2018-18312] Heap-buffer-overflow write in S_regatom (regcomp.c) + +=begin original + +A crafted regular expression could cause heap-buffer-overflow write during +compilation, potentially allowing arbitrary code execution. + +=end original + +ºÙ¹©¤µ¤ì¤¿Àµµ¬É½¸½¤Ë¤è¤ê¡¢¥³¥ó¥Ñ¥¤¥ë»þ¤Ë¥Ò¡¼¥×¥Ð¥Ã¥Õ¥¡¥ª¡¼¥Ð¡¼¥Õ¥í¡¼½ñ¤¹þ¤ß¤ò +°ú¤µ¯¤³¤¹¤³¤È¤¬¤¢¤ê¡¢Ç¤°Õ¥³¡¼¥É¼Â¹Ô¤ò°ú¤µ¯¤³¤¹²ÄǽÀ¤¬¤¢¤ê¤Þ¤·¤¿¡£ + +L<[perl #133423]|https://rt.perl.org/Ticket/Display.html?id=133423> + +=head1 Incompatible Changes + +(¸ß´¹À¤Î¤Ê¤¤Êѹ¹) + +=begin original + +There are no changes intentionally incompatible with 5.28.0. If any exist, +they are bugs, and we request that you submit a report. See +L</Reporting Bugs> below. + +=end original + +¸Î°Õ¤Ë¡¢5.28.0 ¤«¤é¸ß´¹À¤¬¤Ê¤¯¤Ê¤ë¤è¤¦¤Ë¤·¤¿Êѹ¹¤Ï¤¢¤ê¤Þ¤»¤ó¡£ +¤â¤· 5.28.0 ¤È¤Î¸ß´¹À¤¬¤Ê¤±¤ì¤Ð¡¢¤½¤ì¤Ï¥Ð¥°¤Ç¤¹¤Î¤Ç¡¢Êó¹ð¤ò¤ª´ê¤¤¤·¤Þ¤¹¡£ +°Ê²¼¤Î L</Reporting Bugs> ¤ò»²¾È¤·¤Æ¤¯¤À¤µ¤¤¡£ + +=head1 Modules and Pragmata + +(¥â¥¸¥å¡¼¥ë¤È¥×¥é¥°¥Þ) + +=head2 Updated Modules and Pragmata + +(¹¹¿·¤µ¤ì¤¿¥â¥¸¥å¡¼¥ë¤È¥×¥é¥°¥Þ) + +=over 4 + +=item * + +=begin original + +L<Module::CoreList> has been upgraded from version 5.20180622 to 5.20181129_28. + +=end original + +L<Module::CoreList> ¤Ï¥Ð¡¼¥¸¥ç¥ó 5.20180622 ¤«¤é 5.20181129_28 ¤Ë¹¹¿·¤µ¤ì¤Þ¤·¤¿¡£ + +=back + +=head1 Selected Bug Fixes + +(¥Ð¥°½¤Àµ¤ÎÈ´¿è) + +=over 4 + +=item * + +=begin original + +Perl 5.28 introduced an C<index()> optimization when comparing to -1 (or +indirectly, e.g. >= 0). When this optimization was triggered inside a C<when> +clause it caused a warning ("Argument %s isn't numeric in smart match"). This +has now been fixed. +L<[perl #133368]|https://rt.perl.org/Ticket/Display.html?id=133368> + +=end original + +Perl 5.28 ¤Ç¤Ï¡¢C<index()> ¤Ç -1 ¤ÈÈæ³Ó¤¹¤ë (¤¢¤ë¤¤¤Ï´ÖÀÜŪ¤Ë¡¢Î㤨¤Ð >= 0) +¾ì¹ç¤ÎºÇŬ²½¤¬Æ³Æþ¤µ¤ì¤Þ¤·¤¿¡£ +¤³¤ÎºÇŬ²½¤¬ C<when> Àá¤ÎÆ⦤ǰú¤µ¯¤³¤µ¤ì¤¿¾ì¹ç¡¢·Ù¹ð +("Argument %s isn't numeric in smart match") ¤¬È¯À¸¤·¤Æ¤¤¤Þ¤·¤¿¡£ +¤³¤ì¤Ï½¤Àµ¤µ¤ì¤Þ¤·¤¿¡£ +L<[perl #133368]|https://rt.perl.org/Ticket/Display.html?id=133368> + +=item * + +=begin original + +Matching of decimal digits in script runs, introduced in Perl 5.28, had a bug +that led to C<"1\N{THAI DIGIT FIVE}"> matching C</^(*sr:\d+)$/> when it should +not. This has now been fixed. + +=end original + +Perl 5.28 ¤ÇƳÆþ¤µ¤ì¤¿ÍÑ»ú¤Ç¤Î¿ô»ú¤Î¥Þ¥Ã¥Á¥ó¥°¤Ë¤Ï¡¢ +¤½¤¦¤¹¤ë¤Ù¤¤Ç¤Ï¤Ê¤¤¤È¤¤Ë +C<"1\N{THAI DIGIT FIVE}"> ¤¬ C</^(*sr:\d+)$/> ¤Ë¥Þ¥Ã¥Á¥ó¥°¤¹¤ë¤È¤¤¤¦ +¥Ð¥°¤¬¤¢¤ê¤Þ¤·¤¿¡£ +¤³¤ì¤Ï½¤Àµ¤µ¤ì¤Þ¤·¤¿¡£ + +=item * + +=begin original + +The new in-place editing code no longer leaks directory handles. +L<[perl #133314]|https://rt.perl.org/Ticket/Display.html?id=133314> + +=end original + +¤½¤Î¾ì½¤Àµ¥³¡¼¥É¤Ï¤â¤Ï¤ä¥Ç¥£¥ì¥¯¥È¥ê¥Ï¥ó¥É¥ë¤ò¥ê¡¼¥¯¤·¤Ê¤¯¤Ê¤ê¤Þ¤·¤¿¡£ +L<[perl #133314]|https://rt.perl.org/Ticket/Display.html?id=133314> + +=back + +=head1 Acknowledgements + +=begin original + +Perl 5.28.1 represents approximately 5 months of development since Perl 5.28.0 +and contains approximately 6,100 lines of changes across 44 files from 12 +authors. + +=end original + +Perl 5.28.1 ¤Ï¡¢Perl 5.28.0 °Ê¹ß¡¢12 ¿Í¤Îºî¼Ô¤Ë¤è¤Ã¤Æ¡¢ +44 ¤Î¥Õ¥¡¥¤¥ë¤ËÌó 6,100 ¹Ô¤ÎÊѹ¹¤ò²Ã¤¨¤Æ¡¢ +Ìó 5 ¥ö·î³«È¯¤µ¤ì¤Æ¤¤Þ¤·¤¿¡£ + +=begin original + +Excluding auto-generated files, documentation and release tools, there were +approximately 700 lines of changes to 12 .pm, .t, .c and .h files. + +=end original + +¼«Æ°À¸À®¥Õ¥¡¥¤¥ë¡¢Ê¸½ñ¡¢¥ê¥ê¡¼¥¹¥Ä¡¼¥ë¤ò½ü¤¯¤È¡¢12 ¤Î .pm, .t, .c, +.h ¥Õ¥¡¥¤¥ë¤ËÌó 700 ¹Ô¤ÎÊѹ¹¤ò²Ã¤¨¤Þ¤·¤¿¡£ + +=begin original + +Perl continues to flourish into its fourth decade thanks to a vibrant community +of users and developers. The following people are known to have contributed +the improvements that became Perl 5.28.1: + +=end original + +Perl ¤Ï¡¢³èµ¤¤Î¤¢¤ë¥æ¡¼¥¶¡¼¤È³«È¯¼Ô¤Î¥³¥ß¥å¥Ë¥Æ¥£¤Î¤ª¤«¤²¤Ç 30 ǯ¤òĶ¤¨¤Æ +È˱ɤ·¤Æ¤¤¤Þ¤¹¡£ +°Ê²¼¤Î¿Í¡¹¤¬¡¢Perl 5.28.1 ¤Ë¤Ê¤ë¤¿¤á¤Î²þÎɤ˹׸¥¤·¤¿¤³¤È¤¬Ê¬¤«¤Ã¤Æ¤¤¤Þ¤¹: + +Aaron Crane, Abigail, Chris 'BinGOs' Williams, Dagfinn Ilmari MannsE<aring>ker, David +Mitchell, James E Keenan, John SJ Anderson, Karen Etheridge, Karl Williamson, +Sawyer X, Steve Hay, Tony Cook. + +=begin original + +The list above is almost certainly incomplete as it is automatically generated +from version control history. In particular, it does not include the names of +the (very much appreciated) contributors who reported issues to the Perl bug +tracker. + +=end original + +¤³¤ì¤Ï¥Ð¡¼¥¸¥ç¥ó¥³¥ó¥È¥í¡¼¥ëÍúÎò¤«¤é¼«Æ°Åª¤ËÀ¸À®¤·¤Æ¤¤¤ë¤Î¤Ç¡¢¤Û¤Ü³Î¼Â¤Ë +ÉÔ´°Á´¤Ç¤¹¡£ +Æäˡ¢Perl ¥Ð¥°¥È¥é¥Ã¥«¡¼¤ËÌäÂê¤òÊó¹ð¤ò¤·¤Æ¤¯¤ì¤¿ (¤È¤Æ¤â¤¢¤ê¤¬¤¿¤¤)¹×¸¥¼Ô¤Î +̾Á°¤ò´Þ¤ó¤Ç¤¤¤Þ¤»¤ó¡£ + +=begin original + +Many of the changes included in this version originated in the CPAN modules +included in Perl's core. We're grateful to the entire CPAN community for +helping Perl to flourish. + +=end original + +¤³¤Î¥Ð¡¼¥¸¥ç¥ó¤Ë´Þ¤Þ¤ì¤Æ¤¤¤ëÊѹ¹¤Î¿¤¯¤Ï¡¢Perl ¥³¥¢¤Ë´Þ¤Þ¤ì¤Æ¤¤¤ë CPAN +¥â¥¸¥å¡¼¥ëͳÍè¤Î¤â¤Î¤Ç¤¹¡£ +»ä¤¿¤Á¤Ï Perl ¤ÎȯŸ¤ò½õ¤±¤Æ¤¤¤ë CPAN ¥³¥ß¥å¥Ë¥Æ¥£Á´ÂΤ˴¶¼Õ¤·¤Þ¤¹¡£ + +=begin original + +For a more complete list of all of Perl's historical contributors, please see +the F<AUTHORS> file in the Perl source distribution. + +=end original + +Á´¤Æ¤Î Perl ¤ÎÎò»ËŪ¤Ê¹×¸¥¼Ô¤Î¤è¤ê´°Á´¤Ê°ìÍ÷¤Ë¤Ä¤¤¤Æ¤Ï¡¢¤É¤¦¤« Perl ¥½¡¼¥¹ +ÇÛÉۤ˴ޤޤì¤Æ¤¤¤ë F<AUTHORS> ¤ò»²¾È¤·¤Æ¤¯¤À¤µ¤¤¡£ + +=head1 Reporting Bugs + +(¥Ð¥°Êó¹ð) + +=begin original + +If you find what you think is a bug, you might check the perl bug database +at L<https://rt.perl.org/> . There may also be information at +L<http://www.perl.org/> , the Perl Home Page. + +=end original + +¤â¤·¥Ð¥°¤È»×¤ï¤ì¤ë¤â¤Î¤ò¸«¤Ä¤±¤¿¤é¡¢ L<https://rt.perl.org/> ¤Ë¤¢¤ë perl ¥Ð¥° +¥Ç¡¼¥¿¥Ù¡¼¥¹¤ò³Îǧ¤·¤Æ¤¯¤À¤µ¤¤¡£ +Perl ¥Û¡¼¥à¥Ú¡¼¥¸¡¢L<http://www.perl.org/> ¤Ë¤â¾ðÊ󤬤¢¤ê¤Þ¤¹¡£ + +=begin original + +If you believe you have an unreported bug, please run the L<perlbug> program +included with your release. Be sure to trim your bug down to a tiny but +sufficient test case. Your bug report, along with the output of C<perl -V>, +will be sent off to perlb****@perl***** to be analysed by the Perl porting team. + +=end original + +¤â¤·¤Þ¤ÀÊó¹ð¤µ¤ì¤Æ¤¤¤Ê¤¤¥Ð¥°¤À¤È³Î¿®¤·¤¿¤é¡¢¤½¤Î¥ê¥ê¡¼¥¹¤Ë´Þ¤Þ¤ì¤Æ¤¤¤ë +L<perlbug> ¥×¥í¥°¥é¥à¤ò¼Â¹Ô¤·¤Æ¤¯¤À¤µ¤¤¡£ +¥Ð¥°¤ÎºÆ¸½¥¹¥¯¥ê¥×¥È¤ò½½Ê¬¾®¤µ¤¯¡¢¤·¤«¤·Í¸ú¤Ê¥³¡¼¥É¤ËÀÚ¤ê¤Ä¤á¤ë¤³¤È¤ò +°Õ¼±¤·¤Æ¤¯¤À¤µ¤¤¡£ +¥Ð¥°¥ì¥Ý¡¼¥È¤Ï C<perl -V> ¤Î½ÐÎϤȰì½ï¤Ë perlb****@perl***** ¤ËÁ÷¤é¤ì +Perl porting ¥Á¡¼¥à¤Ë¤è¤Ã¤Æ²òÀϤµ¤ì¤Þ¤¹¡£ + +=begin original + +If the bug you are reporting has security implications which make it +inappropriate to send to a publicly archived mailing list, then see +L<perlsec/SECURITY VULNERABILITY CONTACT INFORMATION> +for details of how to report the issue. + +=end original + +Êó¹ð¤·¤è¤¦¤È¤·¤Æ¤¤¤ë¥Ð¥°¤¬¥»¥¥å¥ê¥Æ¥£¤Ë´Ø¤¹¤ë¤â¤Î¤Ç¡¢¸ø³«¤µ¤ì¤Æ¤¤¤ë +¥á¡¼¥ê¥ó¥°¥ê¥¹¥È¤ËÁ÷¤ë¤Î¤¬ÉÔŬÀڤʤâ¤Î¤Ê¤é¡¢¥Ð¥°¤ÎÊó¹ðÊýË¡¤Î¾ÜºÙ¤Ë¤Ä¤¤¤Æ +L<perlsec/SECURITY VULNERABILITY CONTACT INFORMATION> ¤ò»²¾È¤·¤Æ¤¯¤À¤µ¤¤¡£ + +=head1 Give Thanks + +(´¶¼Õ¤òÅÁ¤¨¤ë) + +=begin original + +If you wish to thank the Perl 5 Porters for the work we had done in Perl 5, +you can do so by running the C<perlthanks> program: + +=end original + +¤â¤· Perl 5 ¤Ç¤Ê¤µ¤ì¤¿ºî¶È¤Ë¤Ä¤¤¤Æ Perl 5 Porters ¤Ë´¶¼Õ¤·¤¿¤¤¤È¹Í¤¨¤¿¤Ê¤é¡¢ +C<perlthanks> ¥×¥í¥°¥é¥à¤ò¼Â¹Ô¤¹¤ë¤³¤È¤Ç¤½¤¦¤Ç¤¤Þ¤¹: + + perlthanks + +=begin original + +This will send an email to the Perl 5 Porters list with your show of thanks. + +=end original + +¤³¤ì¤Ï Perl 5 Porters ¥á¡¼¥ê¥ó¥°¥ê¥¹¥È¤Ë¤¢¤Ê¤¿¤Î´¶¼Õ¤Î¸ÀÍÕ¤ò¥á¡¼¥ë¤·¤Þ¤¹¡£ + +=head1 SEE ALSO + +=begin original + +The F<Changes> file for an explanation of how to view exhaustive details on +what changed. + +=end original + +Êѹ¹ÅÀ¤Î´°Á´¤Ê¾ÜºÙ¤ò¸«¤ëÊýË¡¤Ë¤Ä¤¤¤Æ¤Ï F<Changes> ¥Õ¥¡¥¤¥ë¡£ + +=begin original + +The F<INSTALL> file for how to build Perl. + +=end original + +Perl ¤Î¥Ó¥ë¥ÉÊýË¡¤Ë¤Ä¤¤¤Æ¤Ï F<INSTALL> ¥Õ¥¡¥¤¥ë¡£ + +=begin original + +The F<README> file for general stuff. + +=end original + +°ìÈÌŪ¤Ê¤³¤È¤Ë¤Ä¤¤¤Æ¤Ï F<README> ¥Õ¥¡¥¤¥ë¡£ + +=begin original + +The F<Artistic> and F<Copying> files for copyright information. + +=end original + +Ãøºî¸¢¾ðÊó¤Ë¤Ä¤¤¤Æ¤Ï F<Artistic> µÚ¤Ó F<Copying> ¥Õ¥¡¥¤¥ë¡£ + +=cut + +=begin meta + +Translate: SHIRAKATA Kentaro <argra****@ub32*****> +Status: completed + +=end meta +
