For the latest information on ActivePerl, please see:
http://www.ActiveState.com/ActivePerl/
Build 2003 is based on Perl 5.20.3 plus additional selected changes.
Bug Fixes and Changes since build 2002
The following security vulnerabilities have been addressed:
OpenSSL has been upgraded to 1.0.2e to address several moderate issues. Please see https://www.openssl.org/news/secadv/20151203.txt for full details.
CVE-2015-3193: BN_mod_exp may produce incorrect results on x86_64
CVE-2015-3194: Certificate verify crash with missing PSS parameter
CVE-2015-3195: X509_ATTRIBUTE memory leak
CVE-2015-3196: Race condition handling PSK identify hint
CVE-2015-1794: Anon DH ServerKeyExchange with 0 p parameter
Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath() routine returned untained strings even if passed tainted input. This defect undermines the guarantee of taint propagation, which is sometimes used to ensure that unvalidated user input does not reach sensitive code.
Perl 5 on Windows suffers from two out-of-bounds read and multiple small buffer over-read vulnerabilities in the VDir::MapPathA and VDir::MapPathW functions that could potentially be exploited to achieve arbitrary code execution.
These defects have been present since perl-5.005_02-2346-g7766f13, circa 1999, and are still present in the latest releases of Perl.
Significant changes that have occurred in the Perl 5.20.3 release are documented in perl5203delta.
Most bundled modules have been updated to their latest released version from CPAN. Use the ppm query
command to check the exact version included in this release.
Build 2002 is based on Perl 5.20.2 plus additional selected changes.
Bug Fixes and Changes since build 2001
Most bundled modules have been updated to their latest released version from CPAN. Use the ppm query
command to check the exact version included in this release.
Build 2001 is based on Perl 5.20.2 plus additional selected changes.
Bug Fixes and Changes since build 2000
Significant changes that have occurred in the Perl 5.20.2 release are documented in perl5202delta.
Most bundled modules have been updated to their latest released version from CPAN. Use the ppm query
command to check the exact version included in this release.
What's new in the 2000 Series
This build corresponds to the Perl 5.20.1 source code release.
ActivePerl 5.20 for Linux is only released as a 64-bit build for x64 architecture. It requires glibc-2.15 or later, e.g. Ubuntu 12.04.
The 2000 series builds of ActivePerl are not binary compatible with builds in the 1800 or earlier series. Any extensions built using binaries from the ActivePerl 1800 or earlier series will need to be recompiled. Note especially that this applies to PPM packages that may have been built for earlier series of ActivePerl.
Significant changes that have occurred since the 5.18 release are documented in perl5200delta. Other minor changes and bugfixes is documented in perl5201delta.
Most bundled distributions have been updated to their latest released version from CPAN. Use the ppm list
command to check the exact version included in this release.