From des@des.thinksec.com  Thu Dec 13 16:00:15 2001
Return-Path: <des@des.thinksec.com>
Received: from mx1.thinksec.com (time.thinksec.com [193.212.248.2])
	by hub.freebsd.org (Postfix) with ESMTP id 8F74037B405
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 13 Dec 2001 16:00:14 -0800 (PST)
Received: from des.thinksec.com (213-145-188-14.dd.nextgentel.com [213.145.188.14])
	by mx1.thinksec.com (Postfix) with ESMTP id 29219480A4
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 14 Dec 2001 01:00:13 +0100 (CET)
Received: by des.thinksec.com (Postfix, from userid 2602)
	id C71BB55DB; Fri, 14 Dec 2001 01:00:11 +0100 (CET)
Message-Id: <20011214000011.C71BB55DB@des.thinksec.com>
Date: Fri, 14 Dec 2001 01:00:11 +0100 (CET)
From: Dag-Erling Smorgrav <des@des.thinksec.com>
Reply-To: Dag-Erling Smorgrav <des@des.thinksec.com>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Base system includes outdated CGI module
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         32817
>Category:       bin
>Synopsis:       Base system includes outdated CGI module
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    tobez
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Dec 13 16:10:01 PST 2001
>Closed-Date:    Mon Jun 17 22:08:19 CEST 2002
>Last-Modified:  Mon Jun 17 22:08:19 CEST 2002
>Originator:     Dag-Erling Smorgrav
>Release:        FreeBSD 5.0-CURRENT i386
>Organization:
>Environment:
System: FreeBSD des.thinksec.com 5.0-CURRENT FreeBSD 5.0-CURRENT #121: Wed Dec 5 11:40:09 CET 2001 des@des.thinksec.com:/usr/src/sys/i386/compile/DES i386

>Description:

The base system Perl includes an outdated version of the CGI module which
overrides the one installed from ports, so applications which require
newer versions of the CGI module cannot run on -CURRENT.

>How-To-Repeat:

# porteasy -ku www/p5-CGI.pm
# pkg_info -L p5-CGI.pm-2.753  | grep Cookie
/usr/local/lib/perl5/5.6.0/man/man3/CGI::Cookie.3.gz
/usr/local/lib/perl5/site_perl/5.6.0/CGI/Cookie.pm
# grep VERSION /usr/local/lib/perl5/site_perl/5.6.0/CGI/Cookie.pm
$CGI::Cookie::VERSION='1.20';
# perl -e 'use CGI::Cookie 1.20'
CGI::Cookie version 1.2 required--this is only version 1.12 at -e line 1.
BEGIN failed--compilation aborted at -e line 1.
# perl -e 'use CGI::Cookie; print "$CGI::Cookie::VERSION\n"'
1.12
# find /usr/src/contrib/perl5 -name Cookie.pm
/usr/src/contrib/perl5/lib/CGI/Cookie.pm
# grep VERSION /usr/src/contrib/perl5/lib/CGI/Cookie.pm
$CGI::Cookie::VERSION='1.12';

>Fix:

Do not install the CGI module with the base system.

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->tobez 
Responsible-Changed-By: sheldonh 
Responsible-Changed-When: Sun Dec 30 04:34:36 PST 2001 
Responsible-Changed-Why:  
Anton has a plan for handling base system modules and ports modules 
sanely, but the rest of us don't really know about it. :-) 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=32817 
State-Changed-From-To: open->closed 
State-Changed-By: tobez 
State-Changed-When: Mon Jun 17 22:08:05 CEST 2002 
State-Changed-Why:  
The @INC order was changed both in lang/perl5 port and in the -stable 
base system perl.  www/p5-CGI.pm should do the trick now. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=32817 
>Unformatted:
