perl5420delta - Man Page

what is new for perl v5.42.0

Description

This document describes differences between the 5.42.0 release and the 5.40.0 release.

Core Enhancements

More CORE:: subs

chdir has been added as a subroutine to the CORE:: namespace.

Previously, code like &CORE::chdir($dir) or my $ref = \&CORE::chdir; $ref->($dir) would throw an error saying &CORE::chdir cannot be called directly. These cases are now fully supported.

New pragma source::encoding

This allows you to declare that the portion of a program for the remainder of the lexical scope of this pragma is encoded either entirely in ASCII (for use source::encoding 'ascii') or if UTF-8 is allowed as well (for use source::encoding 'utf8'). No other encodings are accepted. The second form is entirely equivalent to use utf8, and may be used interchangeably with that.

The purpose of this pragma is to catch cases early where you forgot to specify use utf8.

use source::encoding 'ascii' is automatically enabled within the lexical scope of a use v5.41.0 or higher.

no source::encoding turns off all this checking for the remainder of its lexical scope. The meaning of non-ASCII characters is then undefined.

New :writer attribute on field variables

Classes defined using use feature 'class' are now able to automatically create writer accessors for scalar fields, by using the :writer attribute, similar to the way that :reader already creates reader accessors.

    class Point {
        field $x :reader :writer :param;
        field $y :reader :writer :param;
    }

    my $p = Point->new( x => 20, y => 40 );
    $p->set_x(60);

New any and all operators

Two new experimental features have been added, which introduce the list-processing operators any and all.

    use v5.42;
    use feature 'keyword_all';
    no warnings 'experimental::keyword_all';

    my @numbers = ...

    if ( all { $_ % 2 == 0 } @numbers ) {
        say "All the numbers are even";
    }

These keywords operate similarly to grep except that they only ever return true or false, testing if any (or all) of the elements in the list make the testing block yield true.  Because of this they can short-circuit, avoiding the need to test any further elements if a given element determines the eventual result.

These are inspired by the same-named functions in the List::Util module, except that they are implemented as direct core operators, and thus perform faster, and do not produce an additional subroutine call stack frame for invoking the code block.

The feature flags enabling those keywords have been named keyword_any and keyword_all to avoid confusion with the ability of the feature module to refer to all of its features by using the :all export tag.  [GH #23104 <https://github.com/Perl/perl5/issues/23104>]

The related experimental warning flags are consequently named experimental::keyword_any and experimental::keyword_all.

Apostrophe as a global name separator can be disabled

This was deprecated in Perl 5.38 and removed as scheduled in perl 5.41.3, but after some discussion has been reinstated by default.

This can be controlled with the apostrophe_as_package_separator feature which is enabled by default, but is disabled from the 5.41 feature bundle onwards.

If you want to disable use within your own code you can explicitly disable the feature:

  no feature "apostrophe_as_package_separator";

Note that disabling this feature only prevents use of apostrophe as a package separator within code; symbolic references still treat ' as :: with the feature disabled:

  my $symref = "My'Module'Var";
  # default features
  my $x = $My'Module'Var; # fine
  no feature "apostrophe_as_package_separator";
  no strict "refs";
  my $y = $$symref;       # like $My::Module::Var
  my $z = $My'Module'Var; # syntax error

[GH #22644 <https://github.com/Perl/perl5/issues/22644>]

Lexical method declaration using my method

Like sub since Perl version 5.18, method can now be prefixed with the my keyword.  This declares a subroutine that has lexical, rather than package visibility.  See perlclass for more detail.

Lexical method invocation operator ->&

Along with the ability to declare methods lexically, this release also permits invoking a lexical subroutine as if it were a method, bypassing the usual name-based method resolution.

Combined with lexical method declaration, these two new abilities create the effect of having private methods.

Switch and Smart Match operator kept, behind a feature

The "switch" feature and the smartmatch operator, ~~, were introduced in v5.10.  Their behavior was significantly changed in v5.10.1.  When the "experiment" system was added in v5.18.0, switch and smartmatch were retroactively declared experimental.  Over the years, proposals to fix or supplement the features have come and gone.

They were deprecated in Perl v5.38.0 and scheduled for removal in Perl v5.42.0. After extensive discussion their removal has been indefinitely postponed. Using them no longer produces a deprecation warning.

Switch itself still requires the switch feature, which is enabled by default for feature bundles from v5.9.5 through to v5.34.  Switch remains disabled in feature bundles 5.35 and later, but can be separately enabled:

  # no switch here
  use v5.10;
  # switch here
  use v5.36;
  # no switch here
  use feature "switch";
  # switch here

Smart match now requires the smartmatch feature, which is enabled by default and included in all feature bundles up to 5.40.  It is disabled for the 5.41 feature bundle and later, but can be separately enabled:

  # smartmatch here
  use v5.41;
  # no smartmatch here
  use feature "smartmatch";
  # smartmatch here

[GH #22752 <https://github.com/Perl/perl5/issues/22752>]

Unicode 16.0 supported

Perl now supports Unicode 16.0 <https://www.unicode.org/versions/Unicode16.0.0/> including the changes introduced in 15.1 <https://www.unicode.org/versions/Unicode15.1.0/>.

Assigning logical xor ^^= operator

Perl 5.40.0 introduced the logical medium-precedence exclusive-or operator ^^.  It was not noticed at the time that the assigning variant ^^= was also missing.  This is now added.

Security

[CVE-2024-56406] Heap buffer overflow vulnerability with tr//

A heap buffer overflow vulnerability was discovered in Perl.

When there are non-ASCII bytes in the left-hand-side of the tr operator, S_do_trans_invmap() can overflow the destination pointer d.

  $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;'
  Segmentation fault (core dumped)

It is believed that this vulnerability can enable Denial of Service or Arbitrary Code Execution attacks on platforms that lack sufficient defenses.

This problem was discovered by Nathan Mills and assigned [CVE-2024-56406 <https://lists.security.metacpan.org/cve-announce/msg/28708725/>] by the CPAN Security Group <https://security.metacpan.org/>.

The patch to fix this issue (87f42aa0e0096e9a346c9672aa3a0bd3bef8c1dd <https://github.com/Perl/perl5/commit/87f42aa0e0096e9a346c9672aa3a0bd3bef8c1dd>) is applicable to all perls that are vulnerable, including those out-of-support.

[CVE-2025-40909] Perl threads have a working directory race condition where file operations may target unintended paths

Perl thread cloning had a working directory race condition where file operations may target unintended paths. Perl 5.42 will no longer chdir to each handle.

This problem was discovered by Vincent Lefèvre via [GH #23010 <https://github.com/Perl/perl5/issues/23010>] and assigned [CVE-2025-40909 <https://lists.security.metacpan.org/cve-announce/msg/30017499/>] by the CPAN Security Group <https://security.metacpan.org/>.

Fixes were provided via [GH #23019 <https://github.com/Perl/perl5/pull/23019>] and [GH #23361 <https://github.com/Perl/perl5/pull/23361>].

Incompatible Changes

Removed containing function references for functions without eval

Perl 5.40 reintroduced unconditional references from functions to their containing functions to fix a bug introduced in Perl 5.18 that broke the special behaviour of eval EXPR in package DB which is used by the debugger.

In some cases this change led to circular reference chains between closures and other existing references, resulting in memory leaks.

This change has been reverted, fixing [GH #22547 <https://github.com/Perl/perl5/issues/22547>] but re-breaking [GH #19370 <https://github.com/Perl/perl5/issues/19370>].

This means the reference loops won't occur, and that lexical variables and functions from enclosing functions may not be visible in the debugger.

Note that calling eval EXPR in a function unconditionally causes a function to reference its enclosing functions as it always has.

Performance Enhancements

Modules and Pragmata

Updated Modules and Pragmata

  • Archive::Tar has been upgraded from version 3.02_001 to 3.04.
  • B::Deparse has been upgraded from version 1.76 to 1.85.
  • Benchmark has been upgraded from version 1.25 to 1.27.
  • builtin has been upgraded from version 0.014 to 0.019.
  • Compress::Raw::Bzip2 has been upgraded from version 2.212 to 2.213.
  • Compress::Raw::Zlib has been upgraded from version 2.212 to 2.213.
  • Config::Perl::V has been upgraded from version 0.36 to 0.38.
  • CPAN has been upgraded from version 2.36 to 2.38.
  • CPAN::Meta::YAML has been upgraded from version 0.018 to 0.020.
  • Data::Dumper has been upgraded from version 2.189 to 2.192.
  • DB has been upgraded from version 1.08 to 1.09.
  • DBM_Filter has been upgraded from version 0.06 to 0.07.
  • Devel::Peek has been upgraded from version 1.34 to 1.36.
  • Devel::PPPort has been upgraded from version 3.72 to 3.73.
  • Digest::MD5 has been upgraded from version 2.58_01 to 2.59.
  • DynaLoader has been upgraded from version 1.56 to 1.57.
  • experimental has been upgraded from version 0.032 to 0.035.
  • Exporter has been upgraded from version 5.78 to 5.79.
  • ExtUtils::CBuilder has been upgraded from version 0.280240 to 0.280242.
  • ExtUtils::MakeMaker has been upgraded from version 7.70 to 7.76.
  • ExtUtils::ParseXS has been upgraded from version 3.51 to 3.57.
  • ExtUtils::Typemaps has been upgraded from version 3.51 to 3.57.
  • Fcntl has been upgraded from version 1.18 to 1.20.
  • feature has been upgraded from version 1.89 to 1.97.
  • fields has been upgraded from version 2.25 to 2.27.
  • File::Spec has been upgraded from version 3.90 to 3.94.
  • Getopt::Long has been upgraded from version 2.57 to 2.58.
  • HTTP::Tiny has been upgraded from version 0.088 to 0.090.
  • IO::Compress has been upgraded from version 2.212 to 2.213.
  • IO::Socket::IP has been upgraded from version 0.42 to 0.43.
  • IPC::Open3 has been upgraded from version 1.22 to 1.24.
  • locale has been upgraded from version 1.12 to 1.13.
  • Math::BigInt has been upgraded from version 2.003002 to 2.005002.
  • Math::BigInt::FastCalc has been upgraded from version 0.5018 to 0.5020.
  • Math::Complex has been upgraded from version 1.62 to 1.63.
  • Memoize has been upgraded from version 1.16 to 1.17.
  • Module::CoreList has been upgraded from version 5.20240609 to 5.20250702.
  • NDBM_File has been upgraded from version 1.17 to 1.18.
  • ODBM_File has been upgraded from version 1.18 to 1.20.
  • Opcode has been upgraded from version 1.65 to 1.69.
  • overload has been upgraded from version 1.37 to 1.40.
  • parent has been upgraded from version 0.241 to 0.244.
  • perlfaq has been upgraded from version 5.20240218 to 5.20250619.
  • Pod::Usage has been upgraded from version 2.03 to 2.05.
  • podlators has been upgraded from version 5.01_02 to v6.0.2.
  • POSIX has been upgraded from version 2.20 to 2.23.
  • re has been upgraded from version 0.47 to 0.48.
  • Safe has been upgraded from version 2.46 to 2.47.
  • Scalar::Util has been upgraded from version 1.63 to 1.68_01.
  • Search::Dict has been upgraded from version 1.07 to 1.08.
  • SelfLoader has been upgraded from version 1.27 to 1.28.
  • sort has been upgraded from version 2.05 to 2.06.
  • Storable has been upgraded from version 3.32 to 3.37.
  • strict has been upgraded from version 1.13 to 1.14.
  • Term::Table has been upgraded from version 0.018 to 0.024.
  • Test::Harness has been upgraded from version 3.48 to 3.50.
  • Test::Simple has been upgraded from version 1.302199 to 1.302210.
  • Thread has been upgraded from version 3.05 to 3.06.
  • threads has been upgraded from version 2.40 to 2.43.
  • threads::shared has been upgraded from version 1.69 to 1.70.
  • Tie::File has been upgraded from version 1.09 to 1.10.
  • Tie::RefHash has been upgraded from version 1.40 to 1.41.
  • Time::HiRes has been upgraded from version 1.9777 to 1.9778.
  • Time::Piece has been upgraded from version 1.3401_01 to 1.36.
  • Unicode::UCD has been upgraded from version 0.78 to 0.81.
  • utf8 has been upgraded from version 1.25 to 1.27.
  • version has been upgraded from version 0.9930 to 0.9933.
  • VMS::Filespec has been upgraded from version 1.13 to 1.15.
  • warnings has been upgraded from version 1.69 to 1.74.
  • Win32 has been upgraded from version 0.59 to 0.59_01.
  • XS::APItest has been upgraded from version 1.36 to 1.43.

Documentation

Changes to Existing Documentation

We have attempted to update the documentation to reflect the changes listed in this document. If you find any we have missed, open an issue at <https://github.com/Perl/perl5/issues>.

Additionally, the following selected changes have been made:

perlapi

  • Combined the documentation for several groups of related functions into single entries.
  • All forms of gv_fetchmeth() are now documented together.
  • gv_autoload4 is now documented with gv_autoload_pv and additional notes added. The long Perl_ forms are now listed when available.

perldata

  • Binary and octal floating-point constants (such as 012.345p-2 and 0b101.11p-1) are now documented. This feature was first introduced in perl 5.22.0 together with hexadecimal floating-point constants and had a few bug fixes in perl 5.28.0, but it was never formally documented. [GH #18664 <https://github.com/Perl/perl5/issues/18664>]

perlfunc

  • Clarified the description of ref and reftype in relation to built-in types and class names.
  • Clarified that perl sort is stable (and has been since v5.8.0).
  • The recommended alternatives to the rand() function were updated to modern modules recommended by the CPAN Security Group <https://security.metacpan.org/>. [GH #22873 <https://github.com/Perl/perl5/pull/22873>]

perlgov

  • The list of Steering Council and Core Team members have been updated, following the conclusion of the latest election on 2024-07-17.

perlguts

  • Added some description of "real" AVs compared to "fake" AVs.
  • Documentation was updated to reflect that mixing Newx, Renew, and Safefree vs malloc, realloc, and free are not allowed, and mixing pointers between the 2 classes of APIs is not allowed. Updates made in perlguts and perlclib.
  • Additional caveats have been added to the description of TARG.

perlop

  • Portions of perlop are supposed to be ordered so that all the operators wth the same precedence are in a single section, and the sections are ordered so that the highest precedence operators appear first. This ordering has now been restored.  Other reorganization was done to improve clarity, with more basic operations described before ones that depend on them.
  • The documentation for here-docs has been cleaned up and reorganized. Indented here-docs were formerly documented separately, now the two types have interwoven documentation which is more compact, and easier to understand.
  • The documentation of the xor operator has been expanded.
  • Outdated advice about using relational string operators in UTF-8 locales has been removed.  Use Unicode::Collate for the best results, but these operators will give adequate results on many platforms.
  • Normalized alignment of verbatim sections, fixing how they are displayed by some Pod viewers that strip indentation.

perlvar

  • Entries for $# and $* have been amended to note that use of them result in a compilation error, not a warning.

Diagnostics

The following additions or changes have been made to diagnostic output, including warnings and fatal error messages. For the complete list of diagnostic messages, see perldiag.

New Diagnostics

New Errors

  • Use of non-ASCII character 0x%X illegal when 'use source::encoding "ascii"' is in effect

    (F) This pragma forbids non-ASCII characters within its scope.

  • Undefined subroutine &%s called, close to label '%s'

    (F) The subroutine indicated hasn't been defined, or if it was, it has since been undefined.

    This error could also indicate a mistyped package separator, when a single colon was typed instead of two colons. For example, Foo:bar() would be parsed as the label Foo followed by an unqualified function name: foo: bar(). [GH #22860 <https://github.com/Perl/perl5/issues/22860>]

New Warnings

  • __CLASS__ is experimental

    (S experimental::class) This warning is emitted if you use the __CLASS__ keyword of use feature 'class'. This keyword is currently experimental and its behaviour may change in future releases of Perl.

  • %s() attempted on handle %s opened with open()

    (W io) You called readdir(), telldir(), seekdir(), rewinddir() or closedir() on a handle that was opened with open().  If you want to use these functions to traverse the contents of a directory, you need to open the handle with opendir().

    [GH #22394 <https://github.com/Perl/perl5/issues/22394>]

  • Possible precedence problem between ! and %s

    (W precedence) You wrote something like

        !$x < $y               # parsed as: (!$x) < $y
        !$x eq $y              # parsed as: (!$x) eq $y
        !$x =~ /regex/         # parsed as: (!$x) =~ /regex/
        !$obj isa Some::Class  # parsed as: (!$obj) isa Some::Class

    but because ! has higher precedence than comparison operators, =~, and isa, this is interpreted as comparing/matching the logical negation of the first operand, instead of negating the result of the comparison/match.

    To disambiguate, either use a negated comparison/binding operator:

        $x >= $y
        $x ne $y
        $x !~ /regex/

    ... or parentheses:

        !($x < $y)
        !($x eq $y)
        !($x =~ /regex/)
        !($obj isa Some::Class)

    ... or the low-precedence not operator:

        not $x < $y
        not $x eq $y
        not $x =~ /regex/
        not $obj isa Some::Class

    (If you did mean to compare the boolean result of negating the first operand, parenthesize as (!$x) < $y, (!$x) eq $y, etc.)

    Note: this warning does not trigger for code like !!$x == $y, i.e. where double negation (!!) is used as a convert-to-boolean operator.

Changes to Existing Diagnostics

  • %s() attempted on invalid dirhandle %s

    This was consolidated from separate messages for readdir(), telldir(), seekdir(), rewinddir() and closedir() as part of refactoring for [GH #22394 <https://github.com/Perl/perl5/issues/22394>].

  • Useless use of %s in void context

    This warning now triggers for use of a chained comparison like 0 < $x < 1. [GH #22969 <https://github.com/Perl/perl5/issues/22969>]

  • Use of uninitialized value%s

    Prevent this warning when accessing a function parameter in @_ that is an lvalue reference to an untied hash element where the key was undefined.  This warning is still produced at the point of call. [GH #22423 <https://github.com/Perl/perl5/issues/22423>]

Utility Changes

Porting/test-dist-modules.pl

  • Separate installation (without overwriting installed modules) is now the default.
  • Documentation is significantly enhanced.

Configuration and Compilation

Testing

Tests were added and changed to reflect the other additions and changes in this release.  Furthermore, these significant changes were made:

Platform Support

Platform-Specific Notes

arm64 Darwin

Fix arm64 darwin hints when using use64bitall with Configure [GH #22672 <https://github.com/Perl/perl5/issues/22672>]

Android

Changes to perl_langinfo.h for Android [GH #22650 <https://github.com/Perl/perl5/issues/22650>] related to [GH #22627 <https://github.com/Perl/perl5/issues/22627>].

Cygwin

cygwin.c: fix several silly/terrible C errors. [GH #22724 <https://github.com/Perl/perl5/issues/22724>]

Supply an explicit base address for cygperl*.dll that cannot conflict with those generated by --enable-auto-image-base.  [GH #22695 <https://github.com/Perl/perl5/issues/22695>][GH #22104 <https://github.com/Perl/perl5/issues/22104>]

MacOS (Darwin)

Collation of strings using locales on MacOS 15 (Darwin 24) and up has been turned off due to a failed assertion in its libc.

If earlier versions are also experiencing issues (such as failures in locale.t), you can explicitly disable locale collation by adding the -Accflags=-DNO_LOCALE_COLLATE option to your invocation of ./Configure, or just -DNO_LOCALE_COLLATE to the ccflags and cppflags variables in config.sh.

Internal Changes

Selected Bug Fixes

Obituaries

Abe Timmerman

Abe Timmerman (ABELTJE) passed away on August 15, 2024.

Since 2002, Abe built and maintained the Test::Smoke project: "a set of scripts and modules that try to run the Perl core tests on as many configurations as possible and combine the results into an easy to read report". Smoking Perl on as many platforms and configurations as possible has been instrumental in finding bugs and developing patches for those bugs.

Abe was a regular attendee of the Perl Toolchain Summit (née Perl QA Hackathon), the Dutch Perl Workshop and the Amsterdam.pm user group meetings. With his kindness, his smile and his laugh, he helped make Perl and its community better.

Abeltje's memorial card said "Grab every opportunity to have a drink of bubbly. This is an opportunity". We'll miss you Abe, and we'll have a drink of bubbly in your honor.

Andrew Main

Andrew Main (ZEFRAM) passed away on March 10, 2025.

Zefram was a brilliant person, seemingly knowledgeable in everything and happy to impart his knowledge and share his striking insights with a gentle, technical demeanor that often failed to convey the genuine care with which he communicated.

It would be impossible to overstate the impact that Zefram has had on both the language and culture of Perl over the years. From his countless contributions to the code-base, to his often quirky but always distinctive appearances at conferences and gatherings, his influence and memory are sure to endure long into the future.

Zefram wished to have no designated memorial location in meatspace. His designated memorial location in cyberspace is <http://www.fysh.org/~zefram/personal/>.

Acknowledgements

Perl 5.42.0 represents approximately 13 months of development since Perl 5.40.0 and contains approximately 280,000 lines of changes across 1,600 files from 65 authors.

Excluding auto-generated files, documentation and release tools, there were approximately 94,000 lines of changes to 860 .pm, .t, .c and .h files.

Perl continues to flourish into its fourth decade thanks to a vibrant community of users and developers. The following people are known to have contributed the improvements that became Perl 5.42.0:

Aaron Dill, Andrei Horodniceanu, Andrew Ruthven, Antanas Vaitkus, Aristotle Pagaltzis, Branislav Zahradník, brian d foy, Chad Granum, Chris 'BinGOs' Williams, Craig A. Berry, Dabrien 'Dabe' Murphy, Dagfinn Ilmari Mannsåker, Dan Book, Daniel Dragan, Dan Jacobson, David Cantrell, David Mitchell, E. Choroba, Ed J, Ed Sabol, Elvin Aslanov, Eric Herman, Erik Huelsmann, Gianni Ceccarelli, Graham Knop, hbmaclean, H.Merijn Brand, iabyn, James E Keenan, James Raspass, Johan Vromans, Karen Etheridge, Karl Williamson, Leon Timmermans, Lukas Mai, Marek Rouchal, Marin Tsanov, Mark Fowler, Masahiro Honma, Max Maischein, Paul Evans, Paul Johnson, Paul Marquess, Peter Eisentraut, Peter John Acklam, Philippe Bruhat (BooK), pyrrhlin, Reini Urban, Richard Leach, Robert Rothenberg, Robin Ragged, Russ Allbery, Scott Baker, Sergei Zhmylev, Sevan Janiyan, Sisyphus, Štěpán Němec, Steve Hay, TAKAI Kousuke, Thibault Duponchelle, Todd Rinaldo, Tony Cook, Unicode Consortium, Vladimír Marek, Yves Orton.

The list above is almost certainly incomplete as it is automatically generated from version control history. In particular, it does not include the names of the (very much appreciated) contributors who reported issues to the Perl bug tracker.

Many of the changes included in this version originated in the CPAN modules included in Perl's core. We're grateful to the entire CPAN community for helping Perl to flourish.

For a more complete list of all of Perl's historical contributors, please see the AUTHORS file in the Perl source distribution.

Reporting Bugs

If you find what you think is a bug, you might check the perl bug database at <https://github.com/Perl/perl5/issues>. There may also be information at <https://www.perl.org/>, the Perl Home Page.

If you believe you have an unreported bug, please open an issue at <https://github.com/Perl/perl5/issues>. Be sure to trim your bug down to a tiny but sufficient test case.

If the bug you are reporting has security implications which make it inappropriate to send to a public issue tracker, then see "Security VULNERABILITY CONTACT INFORMATION" in perlsec for details of how to report the issue.

Give Thanks

If you wish to thank the Perl 5 Porters for the work we had done in Perl 5, you can do so by running the perlthanks program:

    perlthanks

This will send an email to the Perl 5 Porters list with your show of thanks.

See Also

The Changes file for an explanation of how to view exhaustive details on what changed.

The INSTALL file for how to build Perl.

The README file for general stuff.

The Artistic and Copying files for copyright information.

Info

2025-07-25 perl v5.42.0 Perl Programmers Reference Guide