Bug 701631 - CGI.pm popup_menu if optgroup, $selected is not properly escaped.
Summary: CGI.pm popup_menu if optgroup, $selected is not properly escaped.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: perl
Version: 5.4
Hardware: All
OS: Linux
high
high
Target Milestone: rc
: ---
Assignee: perl-maint-list
QA Contact: Petr Šplíchal
URL:
Whiteboard:
Depends On: 523827
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-03 12:17 UTC by RHEL Program Management
Modified: 2016-06-01 01:41 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Prior to this update, running the CGI::popup_menu method with a default menu choice (that is, the "-default" parameter) that contained a plus sign failed to produce correct HTML output. This update applies a patch that corrects the underlying option parser, and the presence of the plus sign in the name of the default menu choice no longer prevents CGI::popup_menu from producing correct output.
Clone Of:
Environment:
Last Closed: 2011-06-09 14:06:23 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:0863 0 normal SHIPPED_LIVE perl bug fix update 2011-06-09 14:06:15 UTC

Description RHEL Program Management 2011-05-03 12:17:41 UTC 
This bug has been copied from bug #523827 and has been proposed
to be backported to 5.6 z-stream (EUS).
Comment 5 Jaromir Hradilek 2011-05-09 09:29:30 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Prior to this update, running the CGI::popup_menu method with a default menu choice (that is, the "-default" parameter) that contained a plus sign failed to produce correct HTML output. This update applies a patch that corrects the underlying option parser, and the presence of the plus sign in the name of the default menu choice no longer prevents CGI::popup_menu from producing correct output.
Comment 7 errata-xmlrpc 2011-06-09 14:06:23 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0863.html
Note You need to log in before you can comment on or make changes to this bug.