Skip Menu |

This queue is for tickets about the Cache-Memcached-LibMemcached CPAN distribution.

Report information
The Basics
Id: 127173
Status: open
Priority: 0/
Queue: Cache-Memcached-LibMemcached

People
Owner: Nobody in particular
Requestors: mans0954 [...] debian.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: [PATCH] Use FindBin to find inc::Module::Install
Date: Sat, 22 Sep 2018 14:02:11 +0100
To: bug-cache-memcached-libmemcached [...] rt.cpan.org
From: Christopher Hoskin <mans0954 [...] debian.org>
In Debian we are currently applying the following patch to Cache-Memcached-libmemcached. We thought you might be interested in it too. Description: Use FindBin to find inc::Module::Install . is no longer included in @INC as of Perl 5.26 due to CVE-2016-1238 Author: Christopher Hoskin <mans0954@debian.org> Last-Update: 2018-09-22 The patch is tracked in our Git repository at https://salsa.debian.org/perl-team/modules/packages/libcache-memcached-libmemcached-perl/raw/master/debian/patches/findbin.patch Thanks for considering, Christopher Hoskin, Debian Perl Group

Message body is not shown because sender requested not to inline it.

I don't think this is a good patch. FindBin does a *lot* of things behind the scenes, most of which is unnecessary. The correct minimal change to make here is to add a single line to Makefile.PL: use lib '.'; More properly, this distribution should be transitioned off of Module::Install entirely, but that's a bigger change to make.