From 4411eb6fbd724ad3b632a2ac6f245b99b70952c1 Mon Sep 17 00:00:00 2001 From: avsm Date: Sat, 17 Mar 2001 00:42:06 +0000 Subject: [PATCH] [ security update ] update to p5-libwww-5.51 If LWP::UserAgent::env_proxy is called in a CGI environment, the case-insensitivity when looking for "http_proxy" permits "HTTP_PROXY" to be found, but this can be trivially set by the web client using the "Proxy:" header. The fix applied is that $ENV{HTTP_PROXY} is not longer honored for CGI scripts. The CGI_HTTP_PROXY environment variable can be used instead. --- www/p5-libwww/Makefile | 4 ++-- www/p5-libwww/files/md5 | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/www/p5-libwww/Makefile b/www/p5-libwww/Makefile index 4b3f10ddd2e..c151c7ef098 100644 --- a/www/p5-libwww/Makefile +++ b/www/p5-libwww/Makefile @@ -1,6 +1,6 @@ -# $OpenBSD: Makefile,v 1.3 2001/01/14 23:26:59 avsm Exp $ +# $OpenBSD: Makefile,v 1.4 2001/03/17 00:42:06 avsm Exp $ -DISTNAME= libwww-perl-5.50 +DISTNAME= libwww-perl-5.51 PKGNAME= p5-libwww-5.50 CATEGORIES= www perl5 NEED_VERSION= 1.348 diff --git a/www/p5-libwww/files/md5 b/www/p5-libwww/files/md5 index d4e74f1e1f5..e0488553966 100644 --- a/www/p5-libwww/files/md5 +++ b/www/p5-libwww/files/md5 @@ -1,3 +1,3 @@ -MD5 (libwww-perl-5.50.tar.gz) = 9ae366ecbce3eafb888b99444a9ad670 -RMD160 (libwww-perl-5.50.tar.gz) = 316fb12bdc2f1044c9818ca01e106d9327996f47 -SHA1 (libwww-perl-5.50.tar.gz) = 3980ff3bec6cbd162cf3a19f425fbfef0948904a +MD5 (libwww-perl-5.51.tar.gz) = 4985b175d41ec8b7d3b61670b495ffa3 +RMD160 (libwww-perl-5.51.tar.gz) = d5861618d6a63ea2d697894107161c397fd665ff +SHA1 (libwww-perl-5.51.tar.gz) = b06a36d104d618bbe0719acc594af45789d8f555