From ae5aaada36f45bd9a33599e5eac02843af8a31e2 Mon Sep 17 00:00:00 2001
From: Reed Loden <reed@reedloden.com>
Date: Fri, 21 Jan 2011 13:14:36 -0800
Subject: [PATCH] Bug 591165: (CVE-2010-4411) [SECURITY] Bump minimum required
version of CGI.pm to v3.51 in order to address header injection
vulnerability. [r=mkanat a=mkanat]
---
Bugzilla/Install/Requirements.pm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/Bugzilla/Install/Requirements.pm b/Bugzilla/Install/Requirements.pm
index f629abeeb..f45360916 100644
--- a/Bugzilla/Install/Requirements.pm
+++ b/Bugzilla/Install/Requirements.pm
@@ -94,9 +94,9 @@ sub REQUIRED_MODULES {
{
package => 'CGI.pm',
module => 'CGI',
- # 3.50 fixes a security problem that affects Bugzilla.
+ # 3.51 fixes a security problem that affects Bugzilla.
# (bug 591165)
- version => '3.50',
+ version => '3.51',
},
{
package => 'Digest-SHA',
--
2.24.1