Leo Lapworth

Apr 102013
 

Best Practical have announced an upgrade and new features for https://rt.cpan.org/.

https://rt.cpan.org/ is the issue tracking system available for every one of the 27,000+ open source distributions released through CPAN.

New features include:

  • Mobile support (also accessible from https://rt.cpan.org/m)
  • Preferred bug tracker information displayed prominently – if the module author wants to use a different tracker it is clearly displayed and linked to

See the announcement for the full list of improvements.

Mar 162013
 

PrePAN provides a place to discuss your modules.

It’s aim is to help with questions like…

  • Are there any similar modules?
  • I’m not confident about the implementation…
  • How can I distribute the module in keeping with CPAN’s conventions?
  • I want someone to review my module..

The PrePAN team recently made two announcements – PrePAN is now on AWS hosting, and they have also joined the MetaCPAN team.

MetaCPAN is an open source search engine for the Comprehensive Perl Archive Network (CPAN), an ever growing archive of code and documentation for the Perl programming language.

Mar 042013
 

The following message concerns a hash-related flaw in perl 5

This issue affects all production versions of perl from 5.8.2 to 5.16.x. It does not affect the upcoming perl 5.18.

In order to prevent an algorithmic complexity attack against its hashing mechanism, perl will sometimes recalculate keys and redistribute the contents of a hash.  This mechanism has made perl robust against attacks that have been demonstrated against other systems.

Research by Yves Orton has recently uncovered a flaw in the rehashing code which can result in pathological behavior.  This flaw could be exploited to carry out a denial of service attack against code that uses arbitrary user input as hash keys.

Because using user-provided strings as hash keys is a very common operation, we urge users of perl to update their perl executable as soon as possible.

Updates to address this issue have been pushed to maint-5.8, maint-5.10maint-5.12, maint-5.14, and maint-5.16 branches today, perl 5.14.4 and 5.16.3 will be released soon, including these fixes. There is no plan to make a new release of any other version.

Vendors* were informed of this problem two weeks ago and are expected to be shipping updates today (or otherwise very soon).

bleadperl is not affected.

This issue has been assigned the identifier CVE-2013-1667.

Aug 122012
 

Strawberry Perl 5.16.1.1 is available at http://strawberryperl.com

(all editions: MSI, ZIP, PortableZIP for both: 32/64bit MS Windows)

More details in Release Notes:
http://strawberryperl.com/release-notes/5.16.1.1-32bit.html (recommended for most situations)
http://strawberryperl.com/release-notes/5.16.1.1-64bit.html

Strawberry Perl is a perl environment for MS Windows containing all you need to run and develop perl applications. It is designed to be as close as possible to perl environment on UNIX systems.

Jun 182012
 

The 2012 Perl White Camel awards were announced at YAPC::NA this week, congratulations to the well deserved recipients…

Perl Community: Renee Bäcker

Renee Bäcker is at the heart of the German Perl community. He publishes $foo Magazine, a sponsor of this conference, is a leader in the German Perl monger community, and is organizing this year’s YAPC::EU in Frankfurt (although he was already short-listed for this award before we knew that).

Perl User Groups: Jim Keenan

Jim Keenan has been a quiet but effective Perl influence. For years he led Perl Seminar New York, a technical complement to NY.pm‘s social focus. He volunteers to help at many hackathons, gently advises new events, and was instrumental in bringing together separate Perl groups
within New York City.

Perl Conferences: Breno G. de Oliveira

Breno G. de Oliveira, or just “garu”, is a social connector in the Brasilian Perl community as well as the PerlSDL community. Active in Rio.pm, he was also the organizer of YAPC::Brasil 2011 in Rio de Janeiro. He has contributed to the PerlSDL book. With a little help, he wants to unite the global Perl community by visiting every YAPC he can and helping other people to travel to Brasil to meet Perl programmers they might not otherwise interact with.