Create new perldelta for 5.40.3

Author: steve-m-hay

MANIFEST

@@ -5720,6 +5720,7 @@ pod/perl5382delta.pod			Perl changes in version 5.38.2
 pod/perl5383delta.pod			Perl changes in version 5.38.3
 pod/perl5400delta.pod			Perl changes in version 5.40.0
 pod/perl5401delta.pod			Perl changes in version 5.40.1
+pod/perl5402delta.pod			Perl changes in version 5.40.2
 pod/perl561delta.pod			Perl changes in version 5.6.1
 pod/perl56delta.pod			Perl changes in version 5.6
 pod/perl581delta.pod			Perl changes in version 5.8.1

Makefile.SH

@@ -627,7 +627,7 @@ esac
 
 $spitshell >>$Makefile <<'!NO!SUBS!'
 
-perltoc_pod_prereqs = extra.pods pod/perl5402delta.pod pod/perlapi.pod pod/perlintern.pod pod/perlmodlib.pod pod/perluniprops.pod
+perltoc_pod_prereqs = extra.pods pod/perl5403delta.pod pod/perlapi.pod pod/perlintern.pod pod/perlmodlib.pod pod/perluniprops.pod
 generated_pods = pod/perltoc.pod $(perltoc_pod_prereqs)
 generated_headers = uudmap.h bitcount.h mg_data.h
 
@@ -1136,9 +1136,9 @@ pod/perlintern.pod: $(MINIPERL_EXE) autodoc.pl embed.fnc
 pod/perlmodlib.pod: $(MINIPERL_EXE) pod/perlmodlib.PL MANIFEST
 	$(MINIPERL) pod/perlmodlib.PL -q
 
-pod/perl5402delta.pod: pod/perldelta.pod
-	$(RMS) pod/perl5402delta.pod
-	$(LNS) perldelta.pod pod/perl5402delta.pod
+pod/perl5403delta.pod: pod/perldelta.pod
+	$(RMS) pod/perl5403delta.pod
+	$(LNS) perldelta.pod pod/perl5403delta.pod
 
 extra.pods: $(MINIPERL_EXE)
 	-@test ! -f extra.pods || rm -f `cat extra.pods`

pod/.gitignore

@@ -47,7 +47,7 @@
 /roffitall
 
 # generated
-/perl5402delta.pod
+/perl5403delta.pod
 /perlapi.pod
 /perlintern.pod
 /perlmodlib.pod

pod/perl.pod

@@ -181,6 +181,7 @@ aux h2ph h2xs perlbug pl2pm pod2html pod2man splain xsubpp
 
     perlhist            Perl history records
     perldelta           Perl changes since previous version
+    perl5402delta       Perl changes in version 5.40.2
     perl5401delta       Perl changes in version 5.40.1
     perl5400delta       Perl changes in version 5.40.0
     perl5383delta       Perl changes in version 5.38.3

pod/perl5402delta.pod

@@ -0,0 +1,113 @@
+=encoding utf8
+
+=head1 NAME
+
+perl5402delta - what is new for perl v5.40.2
+
+=head1 DESCRIPTION
+
+This document describes differences between the 5.40.1 release and the 5.40.2
+release.
+
+If you are upgrading from an earlier release such as 5.40.0, first read
+L<perl5401delta>, which describes differences between 5.40.0 and 5.40.1.
+
+=head1 Security
+
+=head2 [CVE-2024-56406] Heap buffer overflow vulnerability with tr//
+
+A heap buffer overflow vulnerability was discovered in Perl.
+
+When there are non-ASCII bytes in the left-hand-side of the C<tr> operator,
+C<S_do_trans_invmap()> can overflow the destination pointer C<d>.
+
+  $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;'
+  Segmentation fault (core dumped)
+
+It is believed that this vulnerability can enable Denial of Service or
+Arbitrary Code Execution attacks on platforms that lack sufficient defenses.
+
+Discovered by: Nathan Mills.
+
+=head1 Incompatible Changes
+
+There are no changes intentionally incompatible with 5.40.1.  If any exist,
+they are bugs, and we request that you submit a report.  See L</Reporting Bugs>
+below.
+
+=head1 Modules and Pragmata
+
+=head2 Updated Modules and Pragmata
+
+=over 4
+
+=item *
+
+L<Module::CoreList> has been upgraded from version 5.20250118_40 to 5.20250413_40.
+
+=back
+
+=head1 Acknowledgements
+
+Perl 5.40.2 represents approximately 3 months of development since Perl 5.40.1
+and contains approximately 1,600 lines of changes across 37 files from 7
+authors.
+
+Excluding auto-generated files, documentation and release tools, there were
+approximately 640 lines of changes to 5 .pm, .t, .c and .h files.
+
+Perl continues to flourish into its fourth decade thanks to a vibrant community
+of users and developers.  The following people are known to have contributed
+the improvements that became Perl 5.40.2:
+
+Karl Williamson, Lukas Mai, Max Maischein, Paul Evans, Richard Leach, Steve
+Hay, Thibault Duponchelle.
+
+The list above is almost certainly incomplete as it is automatically generated
+from version control history.  In particular, it does not include the names of
+the (very much appreciated) contributors who reported issues to the Perl bug
+tracker.
+
+Many of the changes included in this version originated in the CPAN modules
+included in Perl's core.  We're grateful to the entire CPAN community for
+helping Perl to flourish.
+
+For a more complete list of all of Perl's historical contributors, please see
+the F<AUTHORS> file in the Perl source distribution.
+
+=head1 Reporting Bugs
+
+If you find what you think is a bug, you might check the perl bug database at
+L<https://github.com/Perl/perl5/issues>.  There may also be information at
+L<https://www.perl.org/>, the Perl Home Page.
+
+If you believe you have an unreported bug, please open an issue at
+L<https://github.com/Perl/perl5/issues>.  Be sure to trim your bug down to a
+tiny but sufficient test case.
+
+If the bug you are reporting has security implications which make it
+inappropriate to send to a public issue tracker, then see
+L<perlsec/SECURITY VULNERABILITY CONTACT INFORMATION> for details of how to
+report the issue.
+
+=head1 Give Thanks
+
+If you wish to thank the Perl 5 Porters for the work we had done in Perl 5,
+you can do so by running the C<perlthanks> program:
+
+    perlthanks
+
+This will send an email to the Perl 5 Porters list with your show of thanks.
+
+=head1 SEE ALSO
+
+The F<Changes> file for an explanation of how to view exhaustive details on
+what changed.
+
+The F<INSTALL> file for how to build Perl.
+
+The F<README> file for general stuff.
+
+The F<Artistic> and F<Copying> files for copyright information.
+
+=cut