perl-CGI-tests-5.02-1.fc46 - Fedora Packages

Date	Author	Change
2026-11-04	Jitka Plesnikova <jplesnik at redhat dot com> - 5.02-1	- 5.02 bump (rhbz#2565802) - Fix CVE-2026-120631 (CGI::Cookie->parse backtracking DoS via cookie expires regex) - Fix CVE-2026-120632 (cubic regex backtracking via crafted multipart/related Content-Type) - Fix CVE-2026-120650 (missing/unenforced request size, param and upload limits) - Fix CVE-2026-120651 (infinite loop reading short PUT/POST/PATCH body with DISABLE_UPLOADS) - Fix CVE-2026-120645 (scrolling_list used submitted values as regex for optgroups) - Fix CVE-2026-120646 (uploadInfo() dereferenced plain strings as symbolic references) - Fix CVE-2026-120639 (header injection via HTML entity decoding in header() extra values) - Fix CVE-2026-120644 (CGI::Cookie path/domain/expires not checked; ";" injected attributes) - Fix CVE-2026-120647 (header() -attachment filename did not escape quotes) - Fix CVE-2026-120633 (url()/virtual_host() trusted client-supplied X-Forwarded-Host) - Fix CVE-2026-120638 (redirect() HTML-decoded URL after app checked it) - Fix CVE-2026-120636 (REQUEST_URI could produce protocol-relative or javascript: URLs) - Fix CVE-2026-120643 (url()/self_url() could contain raw single quote via URI->canonical) - Fix CVE-2026-120648 (comment() text could end HTML comment) - Fix CVE-2026-120634 (CGI::Carp warnings leaked between requests in persistent envs) - Fix CVE-2026-120635 (multipart parsing differentials; boundary smuggling) - Fix CVE-2026-120641 (upload filenames could contain path; path traversal risk) - Fix CVE-2026-120640 (POSTDATA/PUTDATA settable via query string/form field) - Fix CVE-2026-120642 (taint mode bypass for upload filename and other values) - Fix CVE-2026-120637 (unrecognised REQUEST_METHOD made argv the request params)
2026-07-16	Fedora Release Engineering <releng at fedoraproject dot org> - 4.72-2	- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
2026-05-12	Jitka Plesnikova <jplesnik at redhat dot com> - 4.72-1	- 4.72 bump (rhbz#2466681)
2026-01-16	Fedora Release Engineering <releng at fedoraproject dot org> - 4.71-2	- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
2025-10-09	Jitka Plesnikova <jplesnik at redhat dot com> - 4.71-1	- 4.71 bump (rhbz#2402510)
2025-07-25	Fedora Release Engineering <releng at fedoraproject dot org> - 4.70-2	- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
2025-07-22	Jitka Plesnikova <jplesnik at redhat dot com> - 4.70-1	- 4.70 bump (rhbz#2382299)
2025-06-23	Jitka Plesnikova <jplesnik at redhat dot com> - 4.69-1	- 4.69 bump (rhbz#2374269)
2025-04-07	Jitka Plesnikova <jplesnik at redhat dot com> - 4.68-1	- 4.68 bump (rhbz#2356535)
2025-01-17	Fedora Release Engineering <releng at fedoraproject dot org> - 4.67-2	- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

usr/
- libexec/
  - perl-CGI/
    - t/
      - APR/
        
        Pool.pm
      - Apache.pm
      - Apache2/
        
        RequestIO.pm
        
        RequestRec.pm
        
        RequestUtil.pm
        
        Response.pm
      - Dump.t
      - ModPerl/
        
        Util.pm
      - append_query.t
      - arbitrary_handles.t
      - autoescape.t
      - can.t
      - carp.t
      - carp_warnings_reset.t
      - cgi.t
      - charset.t
      - checkbox_group.t
      - command_line.t
      - comment.t
      - cookie.t
      - cookie_attributes.t
      - delete.t
      - end_form.t
      - form.t
      - function.t
      - gh-155.t
      - header_attachment.t
      - headers/
        
        attachment.t
        
        charset.t
        
        cookie.t
        
        default.t
        
        nph.t
        
        p3p.t
        
        target.t
        
        type.t
      - headers.t
      - hidden.t
      - html.t
      - html_functions.t
      - http.t
      - import_names.t
      - init.t
      - init_test.txt
      - multipart_boundary_length.t
      - multipart_boundary_line_start.t
      - multipart_content_disposition.t
      - multipart_globals.t
      - multipart_init.t
      - multipart_no_boundary.t
      - multipart_related.t
      - multipart_start.t
      - multipart_user_agent.t
      - new_replay.t
      - no_tabindex.t
      - optgroup.t
      - param_fetch.t
      - param_list_context.t
      - popup_menu.t
      - post_max.t
      - postdata.t
      - postdata_chunked_read.t
      - postdata_short_body.t
      - postdata_spin_loop.t
      - pretty.t
      - push.t
      - query_string.t
      - redirect_query_string.t
      - request.t
      - request_limits.t
      - request_method_unknown.t
      - reserved_params.t
      - rt-31107.t
      - rt-52469.t
      - rt-57524.t
      - rt-75628.t
      - rt-84767.t
      - rt_31107.txt
      - rt_75628.txt
      - save_read_roundtrip.t
      - scrolling_list.t
      - sorted.t
      - start_end_asterisk.t
      - start_end_end.t
      - start_end_start.t
      - taint.t
      - tmpfilename_string_arg.t
      - unescapeHTML.t
      - upload.t
      - uploadInfo.t
      - upload_filename.t
      - upload_post_quoted_unquoted.txt
      - upload_post_text.txt
      - upload_quoted_unquoted.t
      - url.t
      - url_quote.t
      - url_request_uri.t
      - user_agent.t
      - utf8.t
      - util-58.t
      - util.t
    - test

perl-CGI-tests-5.02-1.fc46 in Fedora Rawhide

Changelog

Dependencies

Provides

Files