Bug#289983: PATH environment variable is set to '/bin:/usr/bin' even in non-tainted mode
Serge Olkhowik
Serge Olkhowik <solo@isd.dp.ua>, 289983@bugs.debian.org
Wed, 12 Jan 2005 09:38:25 +0200
Package: libmime-lite-perl
Version: 3.01-3
Severity: important
Tags: patch
PATH environment variable is set to '/bin:/usr/bin' even in non-tainted
mode. I suppose that line 337 in MIME/Lite.pm should look like:
$ENV{PATH} = '/bin:/usr/bin'
unless ${^TAINT} == 0;
BTW: such PATH line isn't portable to non-UNIX platforms.
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7-so
Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R)
Versions of packages libmime-lite-perl depends on:
ii perl 5.8.4-5 Larry Wall's Practical Extraction
-- no debconf information