aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormkanat%bugzilla.org <>2009-09-11 16:57:28 +0000
committermkanat%bugzilla.org <>2009-09-11 16:57:28 +0000
commitb9c4aa4190f0b2603e58ae7539472bc062b2651e (patch)
treed34fd9c02373b4a00b689bf0ae08bcfa44ce409a
parentBug 515191: [SECURITY] SQL Injection via Bug.search (CVE-2009-3125) and Bug.c... (diff)
downloadbugzilla-b9c4aa4190f0b2603e58ae7539472bc062b2651e.tar.gz
bugzilla-b9c4aa4190f0b2603e58ae7539472bc062b2651e.tar.bz2
bugzilla-b9c4aa4190f0b2603e58ae7539472bc062b2651e.zip
Bug 515991: Blacklist CGI 3.46 and 3.47 because CGI::Carp breaks Template Toolkit in those versions.
Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit
-rw-r--r--Bugzilla/Install/Requirements.pm4
1 files changed, 3 insertions, 1 deletions
diff --git a/Bugzilla/Install/Requirements.pm b/Bugzilla/Install/Requirements.pm
index 8050231d9..b21595c83 100644
--- a/Bugzilla/Install/Requirements.pm
+++ b/Bugzilla/Install/Requirements.pm
@@ -65,7 +65,9 @@ sub REQUIRED_MODULES {
# Perl 5.10 requires CGI 3.33 due to a taint issue when
# uploading attachments, see bug 416382.
# Require CGI 3.21 for -httponly support, see bug 368502.
- version => (vers_cmp($perl_ver, '5.10') > -1) ? '3.33' : '3.21'
+ version => (vers_cmp($perl_ver, '5.10') > -1) ? '3.33' : '3.21',
+ # CGI::Carp in 3.46 and 3.47 breaks Template Toolkit
+ blacklist => ['^3\.46$', '^3\.47$'],
},
{
package => 'Digest-SHA',