Package: libdate-manip-perl Version: 6.05-1 Severity: normal
Perl scripts cannot be run in taint mode when using Date::Manip. This simple perl script: #!/usr/bin/perl -T use Date::Manip; fails with the following message: Insecure $ENV{PATH} while running with -T switch at /usr/share/perl5/Date/Manip/TZ.pm line 588. Compilation failed in require at ./test line 3. BEGIN failed--compilation aborted at ./test line 3. This seems to be a result of the TZ methods including commands to be run with the _cmd subroutine. -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-trunk-amd64 (SMP w/2 CPU cores) Locale: LANG=en_CA.utf8, LC_CTYPE=en_CA.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libdate-manip-perl depends on: ii libyaml-syck-perl 1.07-1 fast, lightweight YAML loader and ii perl 5.10.1-8 Larry Wall's Practical Extraction libdate-manip-perl recommends no packages. libdate-manip-perl suggests no packages. -- debconf-show failed -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org