2011-01-27 15:06:50 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 27 15:01:33 UTC 2011 - lars@linux-schulserver.de
|
|
|
|
|
|
|
|
|
|
- disable perl_requires macro for older Distributions
|
|
|
|
|
|
2011-01-17 21:42:10 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 17 21:36:42 UTC 2011 - lars@linux-schulserver.de
|
|
|
|
|
|
|
|
|
|
- update to 1.113:
|
|
|
|
|
+ fixes the following security bugs reported via CVE:
|
|
|
|
|
CVE-2010-2761 - mime boundary issue
|
|
|
|
|
CVE-2010-4410 - crlf injection
|
|
|
|
|
CVE-2010-4411 - incomplete fix for crlf injection -
|
|
|
|
|
and also via bnc #657343 and bnc #663396
|
|
|
|
|
+ Port max-age support from CGI.pm, to improve compatibility and
|
|
|
|
|
RFC-compliance
|
|
|
|
|
+ some fixes in the testsuite
|
|
|
|
|
+ Sync cookie references with CGI.pm: add reference to the
|
|
|
|
|
newer RFC 2695
|
|
|
|
|
+ documentation fixes
|
|
|
|
|
+ Optimize Vars(): Don't build %hash if we aren't going to use it,
|
|
|
|
|
and don't call "tie" unless we need to
|
|
|
|
|
+ Added "+" and "\." to the mime character class.
|
|
|
|
|
+ Fixed wrong match for mimetypes.
|
2011-01-17 21:55:44 +00:00
|
|
|
- remove perl-CGI-Simple-CVE-2010-2761.patch (included upstream)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 8 15:03:40 CET 2010 - lrupp@suse.de
|
|
|
|
|
|
|
|
|
|
- fix CVE-2010-2761 (bnc#657731) - multipart mime boundary
|
|
|
|
|
(perl-CGI-Simple-CVE-2010-2761.patch)
|
2011-01-17 21:42:10 +00:00
|
|
|
|
2010-12-05 20:38:12 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 1 13:30:55 UTC 2010 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- switch to perl_requires macro
|
|
|
|
|
|
2010-01-11 17:09:16 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Jan 10 15:43:32 CET 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
|
|
- enable parallel build
|
|
|
|
|
|
2009-09-09 22:53:01 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 2 15:33:56 UTC 2009 - chris@computersalat.de
|
|
|
|
|
|
|
|
|
|
- update to 1.112
|
|
|
|
|
* 1.112 2009-05-31
|
|
|
|
|
- (thanks bingos) added missing IO::Scalar dependency.
|
|
|
|
|
* 1.111 2009-05-28
|
|
|
|
|
- Implemented Michael Nachbaur fixes for multipart form data
|
|
|
|
|
handling.
|
|
|
|
|
* 1.110 2009-05-24
|
|
|
|
|
- Added missing test to manifest / distro.
|
|
|
|
|
- Added a test to ensure the manifest is consistent.
|
|
|
|
|
- Migrated to git.
|
|
|
|
|
* 1.109 2009-04-16
|
|
|
|
|
- Added support for HttpOnly to CGI::Simple::Cookie. Thanks to
|
|
|
|
|
Scott Thomson for the patch.
|
|
|
|
|
* 1.108 2009-03-13
|
|
|
|
|
- Remove bogus references to Selfloader in documenation. No
|
|
|
|
|
functional changes.
|
|
|
|
|
* 1.107 2009-03-07
|
|
|
|
|
- CGI::Simple::Cookie, fixed bug when cookie had both leading and
|
|
|
|
|
trailing white space (RT#34314, Ron Savage and Mark Stosberg)
|
|
|
|
|
- Accept a comma as well as semi-colon as a cookie separator. This
|
|
|
|
|
is consistent with CGI.pm as well as RFC 2965, which states: "A
|
|
|
|
|
server SHOULD also accept comma (,) as the separator between cookie-
|
|
|
|
|
values for future compatibility." (Mark Stosberg)
|
|
|
|
|
- Support cookies which have an equals sign in the value. Ported
|
|
|
|
|
from CGI.pm (Mark Stosberg)
|
|
|
|
|
- Support cookies in which one of multiple values is empty. Ported
|
|
|
|
|
from CGI.pm (Mark Stosberg)
|
|
|
|
|
- Fixed bug when calling unescapeHTML on HTML that wasn't
|
|
|
|
|
properly escaped in the first place. Thanks to M-Uchino and
|
|
|
|
|
Mark Stosberg.
|
|
|
|
|
- Removed bogus dependency on version.pm.
|
|
|
|
|
- Add heuristic to upload to handle the case where no boundary is
|
|
|
|
|
specified in CONTENT_TYPE. See #14838.
|
|
|
|
|
- added perl-macros
|
|
|
|
|
- specmods
|
|
|
|
|
o added header
|
|
|
|
|
o fixed deps
|
|
|
|
|
o added Url
|
|
|
|
|
o removed Provides perl-CGI-Carp
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Nov 30 03:29:54 CET 2008 - lars@linux-schulserver.de
|
|
|
|
|
|
|
|
|
|
- initial version 1.106
|
|
|
|
|
|
