pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/www/p5-CGI



Module Name:    pkgsrc
Committed By:   hiramatsu
Date:           Tue Nov 22 03:38:25 UTC 2011

Modified Files:
        pkgsrc/www/p5-CGI: Makefile distinfo

Log Message:
Update p5-CGI to 3.58.

Changes from previous:
Version 3.58 Nov 11th, 2011

    [DOCUMENTATION]
    - Clarify that using query_string() only has defined behavior when using 
the GET method. (RT#60813)

Version 3.57 Nov 9th, 2011
    [INTERNALS]
    - test failure in t/fast.t introduced in 3.56 is fixed. (Thanks to zefram 
and chansen).
    - Test::More requirement has been bumped to 0.98

Version 3.56 Nov 8th, 2011

    [SECURITY]
    Use public and documented FCGI.pm API in CGI::Fast
        CGI::Fast was using an FCGI API that was deprecated and removed from
        documentation more than ten years ago. Usage of this deprecated API with
        FCGI >= 0.70 or FCGI <= 0.73 introduces a security issue.
        <https://rt.cpan.org/Public/Bug/Display.html?id=68380>
        <http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-2766>
        (Thanks to chansen)

    [INTERNALS]
    - tmp files are now cleaned up on VMS ( RT#69210, thanks to 
cberry%cpan.org@localhost )
    - Fixed test failure: done_testing() added to url.t (Thanks to Ryan 
Jendoubi)
    - Clarify preferred bug submission location in docs, and note that Mark 
Stosberg
      is the current maintainer.

Version 3.55 June 3rd, 2011

    [THINGS THAT MAY BREAK YOUR CODE]
    url() was fixed to return "PATH_INFO" when it is explicitly requested
    with either the path=>1 or path_info=>1 flag.

    If your code is running under mod_rewrite (or compatible) and you are 
calling self_url() or
    you are calling url() and passing path_info=>1, These methods will actually 
be
    returning PATH_INFO now, as you have explicitly requested, or has self_url()
    has requested on your behalf.

    The PATH_INFO has been omitted in such URLs since the issue was introduced
    in the 3.12 release in December, 2005.

    This bug is so old your application may have come to depend on it or
    workaround it. Check for application before upgrading to this release.

    Examples of affected method calls:

     $q->url(-absolute => 1, -query => 1, -path_info => 1 )
     $q->url(-path=>1)
     $q->url(-full=>1,-path=>1)
     $q->url(-rewrite=>1,-path=>1)
     $q->self_url();


To generate a diff of this commit:
cvs rdiff -u -r1.56 -r1.57 pkgsrc/www/p5-CGI/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/www/p5-CGI/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index