perldelta - Acknowledge discoverers of security vulnerabilities

1 files changed, 6 insertions, 0 deletions

diff --git a/pod/perldelta.pod b/pod/perldelta.pod
index 58fd01de6c..0e30f9f44f 100644
--- a/pod/perldelta.pod
+++ b/pod/perldelta.pod
@@ -25,6 +25,8 @@ The target system needs a sufficient amount of memory to allocate partial
 expansions of the nested quantifiers prior to the overflow occurring.  This
 requirement is unlikely to be met on 64-bit systems.
 
+Discovered by: ManhND of The Tarantula Team, VinCSS (a member of Vingroup).
+
 =head2 [CVE-2020-10878] Integer overflow via malformed bytecode produced by a crafted regular expression
 
 Integer overflows in the calculation of offsets between instructions for the
@@ -32,6 +34,8 @@ regular expression engine could cause corruption of the intermediate language
 state of a compiled regular expression.  An attacker could abuse this behaviour
 to insert instructions into the compiled form of a Perl regular expression.
 
+Discovered by: Hugo van der Sanden and Slaven Rezic.
+
 =head2 [CVE-2020-12723] Buffer overflow caused by a crafted regular expression
 
 Recursive calls to C<S_study_chunk()> by Perl's regular expression compiler to
@@ -39,6 +43,8 @@ optimize the intermediate language representation of a regular expression could
 cause corruption of the intermediate language state of a compiled regular
 expression.
 
+Discovered by: Sergey Aleynikov.
+
 =head2 Additional Note
 
 An application written in Perl would only be vulnerable to any of the above