=head1 Security
-This release contains one major and a number of minor security fixes.
-The latter are included mainly to allow the test suite to pass cleanly
-with the clang compiler's address sanitizer facility.
+This release contains one major, and medium, and a number of minor
+security fixes. The latter are included mainly to allow the test suite to
+pass cleanly with the clang compiler's address sanitizer facility.
=head2 CVE-2013-1667: memory exhaustion with arbitrary hash keys
This problem has been fixed.
+=head2 memory leak in Encode
+
+The UTF-8 encoding implementation in Encode.xs had a memory leak which has been
+fixed.
+
=head2 [perl #111594] Socket::unpack_sockaddr_un heap-buffer-overflow
A read buffer overflow could occur when copying C<sockaddr> buffers.
=back
+L<Encode> has been upgraded from version 2.42_01 to version 2.42_02.
+
L<Module::CoreList> has been updated to version 2.49_05 to add data for
this release.