Patches for CVE-2011-0009

[Xavier Bachelot]

Hi,

I've been looking at the issue for both rt 3.6 and 3.8.
I have a rather full featured patch for 3.8 and I took the Debian patch
for 3.6. However, I'm not happy with 3.6, it's lacking the script to fix
all the passwords. I'll try to come up with something better in the next
few days. Here's my WIP for reference.

Regards,
Xavier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rt3-3.6.10-salted_passwords.patch
Type: text/x-patch
Size: 3376 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/perl-devel/attachments/20110126/10843752/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rt3-3.8.10-Patch-for-CVE-2011-0009.patch
Type: text/x-patch
Size: 10650 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/perl-devel/attachments/20110126/10843752/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rt3-3.6.10-spec.patch
Type: text/x-patch
Size: 1013 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/perl-devel/attachments/20110126/10843752/attachment-0002.bin>