Update to 3.63. From the changelog:

[SECURITY]
- CR escaping for Set-Cookie and P3P headers was improved. There was potential
  for newline injection in these headers.
  (Thanks to anazawa, https://github.com/markstos/CGI.pm/pull/23)

[INTERNALS]
- Changed how the  deprecated endform function was defined for compatibilty
  with the development version of Perl.
- Fix failures in t/tmpdir.t when run as root
  https://github.com/markstos/CGI.pm/issues/22, RT#80659)

- Made it possible to force a sorted order for things like hash
  attributes so that tests are not dependent on a particular hash
  ordering. This will be required in modern perls which will
  change the ordering per process. (Yves, RT#80659)

- formatting of CGI::Carp documentation was improved. Thanks to benkasminbullock.
- un-TODO some tests in t/tmpdir.t that were passing in most cases.
  More on this:
    https://github.com/markstos/CGI.pm/issues/19#
    cc73dc9807

www/p5-CGI/Makefile

@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.61 2013/05/31 12:42:35 wiz Exp $
+# $NetBSD: Makefile,v 1.62 2013/07/10 02:54:04 schmonz Exp $
 
-VERS=		3.60
+VERS=		3.63
 DISTNAME=	CGI.pm-${VERS}
 PKGNAME=	p5-CGI-${VERS}
-PKGREVISION=	2
 SVR4_PKGNAME=	p5cgi
 CATEGORIES=	www perl5
 MASTER_SITES+=	${MASTER_SITE_PERL_CPAN:=CGI/}

www/p5-CGI/distinfo

@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.27 2012/09/11 07:43:53 sno Exp $
+$NetBSD: distinfo,v 1.28 2013/07/10 02:54:04 schmonz Exp $
 
-SHA1 (CGI.pm-3.60.tar.gz) = 43e381b3d97fc89248224f6cceabb15323b7320c
+SHA1 (CGI.pm-3.63.tar.gz) = 9ff0b86a0d8597056968a71933b072efd36453eb
-RMD160 (CGI.pm-3.60.tar.gz) = c53847de496cc9684a44706d3d512d3fad09fd25
+RMD160 (CGI.pm-3.63.tar.gz) = 658b2f9a1a810c8f6ec189bf0f0dca9be014ddc0
-Size (CGI.pm-3.60.tar.gz) = 246131 bytes
+Size (CGI.pm-3.63.tar.gz) = 247277 bytes