update: perl

[dongsupark]

Name: perl
CVEs: CVE-2023-47038
CVSSs: 7.8
Action Needed: update to >= 5.38.2

Summary:

• CVE-2023-47038 - Write past buffer end via illegal user-defined Unicode property. This vulnerability was reported directly to the Perl security team by Nathan Mills [email protected].
  A crafted regular expression when compiled by perl 5.30.0 through 5.38.0 can
  cause a one-byte attacker controlled buffer overflow in a heap allocated buffer.
  The 5.34.2, 5.36.2 and 5.38.1 releases were issued with fixes for these issues.
  However, there were issues with those releases, as noted in the email at https://www.nntp.perl.org/group/perl.perl5.porters/2023/11/msg267365.html and thus versions 5.34.3, 5.36.3 and 5.38.2 were released to fix those issues: https://www.nntp.perl.org/group/perl.perl5.porters/2023/11/msg267400.html

refmap.gentoo: https://bugs.gentoo.org/918612