Package: libmime-lite-perl
Version: 3.01-3
Severity: important
Tags: patch

PATH environment variable is set to '/bin:/usr/bin' even in non-tainted
mode. I suppose that line 337 in MIME/Lite.pm should look like:

$ENV{PATH} = '/bin:/usr/bin'
  unless ${^TAINT} == 0;

BTW: such PATH line isn't portable to non-UNIX platforms.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7-so
Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R)

Versions of packages libmime-lite-perl depends on:
ii  perl                          5.8.4-5    Larry Wall's Practical Extraction 

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to