https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7389

            Bug ID: 7389
           Summary: SA Can't build and test on a perl lacking . in @INC
           Product: Spamassassin
           Version: unspecified
          Hardware: PC
                OS: Mac OS X
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Building & Packaging
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: Undefined

As a result of CVE-2016-1238, In 5.26 it will be a build option to make a perl
without . in @INC. This requires the script writer to be explicit if they want
to load modules from relative paths.

For more info you can also see
https://rt.perl.org/Ticket/Display.html?id=130467 and
https://rt.perl.org/Ticket/Display.html?id=127810 for core perl discussions.

My doc is here
http://blogs.perl.org/users/todd_rinaldo/2016/11/how-removing-from-inc-is-about-to-break-cpan.html

I have a patch to fix SA and will submit it shortly.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to