diff options
author | Ivan Kohler <ivan@freeside.biz> | 2017-08-25 15:06:19 -0700 |
---|---|---|
committer | Ivan Kohler <ivan@freeside.biz> | 2017-08-25 15:06:19 -0700 |
commit | cbfeb5f6b7490f78361318ce6290bfb442dbfcbe (patch) | |
tree | e6409692bc2376649eeda94344f0a7f578a75428 /rt/lib/RT.pm | |
parent | 8ffd7de981603a189cd0ea62ca948eaf3f66ca49 (diff) | |
parent | 5b5eb87bf66f1fac003a13dc2db48e8970c5c986 (diff) |
Merge branch 'master' of git.freeside.biz:/home/git/freeside
Diffstat (limited to 'rt/lib/RT.pm')
-rw-r--r-- | rt/lib/RT.pm | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/rt/lib/RT.pm b/rt/lib/RT.pm index 069309dc7..91aeb1590 100644 --- a/rt/lib/RT.pm +++ b/rt/lib/RT.pm @@ -2,7 +2,7 @@ # # COPYRIGHT: # -# This software is Copyright (c) 1996-2016 Best Practical Solutions, LLC +# This software is Copyright (c) 1996-2017 Best Practical Solutions, LLC # <sales@bestpractical.com> # # (Except where explicitly superseded by other copyright notices) @@ -81,6 +81,10 @@ use vars qw($BasePath $MasonDataDir $MasonSessionDir); +# Set Email::Address module var before anything else loads. +# This avoids an algorithmic complexity denial of service vulnerability. +# See T#157608 and CVE-2015-7686 for more information. +$Email::Address::COMMENT_NEST_LEVEL = 1; RT->LoadGeneratedData(); @@ -765,6 +769,7 @@ sub InstallMode { sub LoadGeneratedData { my $class = shift; my $pm_path = ( File::Spec->splitpath( $INC{'RT.pm'} ) )[1]; + $pm_path = File::Spec->rel2abs( $pm_path ); require "$pm_path/RT/Generated.pm" || die "Couldn't load RT::Generated: $@"; $class->CanonicalizeGeneratedPaths(); @@ -964,7 +969,9 @@ sub Deprecated { Please report them to rt-bugs@bestpractical.com, if you know what's broken and have at least some idea of what needs to be fixed. -If you're not sure what's going on, report them rt-devel@lists.bestpractical.com. +If you're not sure what's going on, start a discussion in the RT Developers +category on the community forum at L<https://forum.bestpractical.com> or +send email to sales@bestpractical.com for professional assistance. =head1 SEE ALSO |