Bug#350954: [rob@tigertech.com: Bug#350954: DSA-960-1 security update breaks libmail-audit-perl when $ENV{HOME} is not set]

[Niko Tyni]

Hi security team,

I'm very sorry that you have to hear from me again :(

There's a regression in the patch for DSA-960-1, for both woody and sarge.
When $HOME is not set, Mail::Audit is now creating logfiles in cwd and
dying if it's not writable.  This happens even if logging is turned off,
which makes the problem much more serious.

I have not yet had a proper look at the proposed patches in #350954 and
the last message of #344029, but I wanted to make you aware of this.

Again, my apologies for the bad handling of this.
-- 
Niko Tyni	ntyni at iki.fi