[Bug 218946] lang/perl5.24 - remote DoS via CPU exhaustion by exercising glob expansion

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218946

            Bug ID: 218946
           Summary: lang/perl5.24 - remote DoS via CPU exhaustion by
                    exercising glob expansion
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: perl at FreeBSD.org
          Reporter: sevan at freebsd.org
             Flags: maintainer-feedback?(perl at FreeBSD.org)
          Assignee: perl at FreeBSD.org

A blog post by Russ Cox, titled "Glob Matching Can Be Simple And Fast Too"
highlighted the issue.
https://research.swtch.com/glob

Patches landed in Perl repo to address the issue
https://perl5.git.perl.org/perl.git/commit/33252c318625f3c6c89b816ee88481940e3e6f95

I don't believe a CVE has been assigned yet but the range of affected software
may be quite wide, not sure how that fits in with vuxml.

-- 
You are receiving this mail because:
You are the assignee for the bug.