Data-FormValidator 2.10 Deleted
Security Advisories
CVE-2011-2201
The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511
- http://www.openwall.com/lists/oss-security/2011/06/13/13
- https://bugzilla.redhat.com/show_bug.cgi?id=712694
- http://www.openwall.com/lists/oss-security/2011/06/12/3
- http://www.securityfocus.com/bid/48167
- https://rt.cpan.org/Public/Bug/Display.html?id=61792
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html
- http://www.openwall.com/lists/oss-security/2011/06/13/5
Fixed version: >4.66
Reported: 2011-09-14
Kwalitee Issues
No Core Issues.
- valid_signature
-
Sign the dist as the last step before creating the archive. Take care not to modify/regenerate dist meta files or the manifest.
Error: Old SIGNATURE detected. Please inform the module author to regenerate SIGNATURE using Module::Signature version 0.82 or newer. gpg: Signature made Mon 21 Apr 2003 07:19:05 AM JST gpg: using DSA key B0A41D295AEFDD7C gpg: Can't check signature: No public key --- SIGNATURE Mon Apr 21 07:19:05 2003 +++ @@ -2,7 +2,7 @@ SHA1 2d098ea47f98354c62a8cf2745e0538f4407c0af Changes SHA1 9d3b441ed02a1f2835c3f1e98910c2efd14f585e MANIFEST SHA1 c4755e252a1aebfc32f11c62f5a6f39a722e6d18 MANIFEST.SKIP -SHA1 17b1eb5e8075bcbeba6f93e11fc4390dcdb35236 META.yml +SHA1 9faf6a70d54786fc4258a4d272fcc4b2e9f567ef META.yml SHA1 db430bd5d98df76843515a65a18d08627b436d65 Makefile.PL SHA1 24e6c32eaea0c1c3f6a3581c3f43525238c6e835 README SHA1 b53538e87840a390182f5478f9f6204f403a9a8d lib/Data/FormValidator.pm ==> MISMATCHED content between SIGNATURE and distribution files! <==
- meta_yml_declares_perl_version
-
If you are using Build.PL define the {requires}{perl} = VERSION field. If you are using MakeMaker (Makefile.PL) you should upgrade ExtUtils::MakeMaker to 6.48 and use MIN_PERL_VERSION parameter. Perl::MinimumVersion can help you determine which version of Perl your module needs.
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- has_known_license_in_source_file
-
Add =head1 LICENSE and/or the proper text of the well-known license to the main module in your code.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Data::FormValidator
- meta_yml_has_repository_resource
-
Add a 'repository' resource to the META.yml via 'meta_add' accessor (for Module::Build) or META_ADD parameter (for ExtUtils::MakeMaker).
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Modules
Name | Abstract | Version | View |
---|---|---|---|
Data::FormValidator | Validates user input (usually from an HTML form) based on input profile. | 2.10 | metacpan |