| Subject: | I18N::Charset not taint-safe |
Version 1.23 is not safe when running under -T due to the use of a string interpolation of a tainted variable within a backtick construct: on trying to import the module:
Show quoted text
>>>>
Insecure dependency in `` while running with -T switch at /usr/share/perl5/I18N/Charset.pm line 968.
Compilation failed in require at ./foo.pl line 12.
BEGIN failed--compilation aborted at ./foo.pl line 12.
<<<<
Presumably 1.24 is OK so long as you don't try to deal with iconv.
Other information:
This is perl, v5.8.0 built for i386-linux-thread-multi
Linux swan 2.4.22 #1 Tue Sep 23 12:18:04 BST 2003 i686 GNU/Linux