Package: perl-base Version: 5.32.1-4 Severity: normal The File::Temp documentation ("perldoc File::Temp", but also the File::Temp(3perl) man page, which is built from the source, AFAIK) doesn't say anything about the permissions of the created file.
This seems to have been fixed upstream together with another change related to permissions in https://github.com/Perl-Toolchain-Gang/File-Temp/pull/30/commits/7aede1e9034dfdc9ffe785538c11445645283711 merged in September 2019: https://github.com/Perl-Toolchain-Gang/File-Temp/pull/30 So I would have expected this to already be in Debian/unstable. -- System Information: Debian Release: 11.0 APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'testing-security'), (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-6-amd64 (SMP w/8 CPU threads) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages perl-base depends on: ii dpkg 1.20.9 ii libc6 2.31-12 ii libcrypt1 1:4.4.18-2 perl-base recommends no packages. Versions of packages perl-base suggests: ii perl 5.32.1-4 ii sensible-utils 0.0.14 -- no debconf information -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)