CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2011/04/18 15:29:51
Modified files:
gnu/usr.bin/perl: patchlevel.h pp.c
gnu/usr.bin/perl/t/op: taint.t
Log message:
Perl security fix for CVE-2011-1487:
ucfirst(), uc() and lc() forget to set the tainted flag if input
was marked as tainted.
http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336
http://perl5.git.perl.org/perl.git/commitdiff/539689e74a3bcb04d29e4cd9396de91a81045b99
ok millert@
