Bug#289983: PATH environment variable is set to '/bin:/usr/bin' even in non-tainted mode
   
    Serge Olkhowik
     
    Serge Olkhowik <solo@isd.dp.ua>, 289983@bugs.debian.org
       
    Wed, 12 Jan 2005 09:38:25 +0200
    
    
  
Package: libmime-lite-perl
Version: 3.01-3
Severity: important
Tags: patch
PATH environment variable is set to '/bin:/usr/bin' even in non-tainted
mode. I suppose that line 337 in MIME/Lite.pm should look like:
$ENV{PATH} = '/bin:/usr/bin'
  unless ${^TAINT} == 0;
BTW: such PATH line isn't portable to non-UNIX platforms.
-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7-so
Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R)
Versions of packages libmime-lite-perl depends on:
ii  perl                          5.8.4-5    Larry Wall's Practical Extraction 
-- no debconf information