OBSOLETE Patch-ID# 141552-04

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************
For further information on patching best practices and resources, please
see the Oracle Technology Network Patching Center: 
http://www.oracle.com/technetwork/systems/patches
***********************************************************************
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.
***********************************************************************

Keywords: security cgi apache carp cookie pretty util mod_perl perl
Synopsis: Obsoleted by: 146032-03 SunOS 5.10: Apache 2 mod_perl Perl cgi patch
Date: Apr/20/2011


Install Requirements: NA                      
                      
Solaris Release: 10

SunOS Release: 5.10

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 141553

Topic: SunOS 5.10: Apache 2 mod_perl Perl cgi patch

Relevant Architectures: sparc

BugId's fixed with this patch: 6289386 6629836 6663288 6758953 6935710 6961567 7004391

Changes incorporated in this version: 7004391

Patches accumulated and obsoleted by this patch: 122239-03 138322-03

Patches which conflict with this patch: 

Patches required with this patch: 120011-14 (or greater)

Obsoleted by: 

Files included with this patch: 

/usr/perl5/5.8.4/bin/perlbug
/usr/perl5/5.8.4/lib/CGI.pm
/usr/perl5/5.8.4/lib/CGI/Apache.pm
/usr/perl5/5.8.4/lib/CGI/Carp.pm
/usr/perl5/5.8.4/lib/CGI/Cookie.pm
/usr/perl5/5.8.4/lib/CGI/Fast.pm
/usr/perl5/5.8.4/lib/CGI/Pretty.pm
/usr/perl5/5.8.4/lib/CGI/Push.pm
/usr/perl5/5.8.4/lib/CGI/Switch.pm
/usr/perl5/5.8.4/lib/CGI/Util.pm
/usr/perl5/5.8.4/lib/CGI/eg/clickable_image.cgi
/usr/perl5/5.8.4/lib/CGI/eg/frameset.cgi
/usr/perl5/5.8.4/lib/CGI/eg/internal_links.cgi
/usr/perl5/5.8.4/lib/CGI/eg/multiple_forms.cgi
/usr/perl5/5.8.4/lib/CGI/eg/nph-clock.cgi
/usr/perl5/5.8.4/lib/CGI/eg/popup.cgi
/usr/perl5/5.8.4/lib/sun4-solaris-64int/CORE/libperl.so.1
/usr/perl5/5.8.4/lib/sun4-solaris-64int/CORE/patchlevel.h
/usr/perl5/5.8.4/lib/sun4-solaris-64int/Safe.pm
/usr/perl5/5.8.4/lib/sun4-solaris-64int/Sys/Syslog.pm
/usr/perl5/5.8.4/lib/sun4-solaris-64int/auto/MIME/Base64/Base64.so
/usr/perl5/5.8.4/lib/sun4-solaris-64int/auto/Storable/Storable.so
/usr/perl5/5.8.4/lib/sun4-solaris-64int/auto/Sys/Syslog/Syslog.so
/usr/perl5/5.8.4/lib/sun4-solaris-64int/auto/re/re.so

Problem Description:

7004391 CGI.pm needs update to filter newlines in headers (CVE-2010-2761, CVE-2010-4411)
 
(from 141552-03)
 
6961567 CVE-2010-1168 - Safe.pm 2.24 and earlier may allow attackers to break out of safe compartment
 
(from 141552-02)
 
6935710 patch 141552-01 causes an error when the Syslog Perl module is used
 
(from 141552-01)
 
	This revision accumulates generic Sustaining patch 138322-03
	into Solaris S10U8 update.
 
(from 138322-03)
 
6758953 Perl Sys::Syslog can log messages with wrong severity
 
(from 138322-02)
 
        This revision accumulates generic Sustaining patch 122239-03
        into Solaris S10U6 update.
 
(from 138322-01)
 
        This revision accumulates generic Sustaining patch 122239-02
        into Solaris S10U6 update.
 
(from 122239-03)
 
6629836 Perl 5.8 vulnerable to buffer overflow in regular expression engine
 
(from 122239-02)
 
6663288 update CGI.pm to latest version 3.33 to address various known bugs
 
(from 122239-01)
 
6289386 CGI.pm is incompatible with new Apache mod_perl library

Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

Special Install Instructions:
-----------------------------
 
None.

README -- Last modified date:  Thursday, January 19, 2012