Bug#289983: PATH environment variable is set to '/bin:/usr/bin' even in non-tainted mode

Serge Olkhowik Serge Olkhowik <solo@isd.dp.ua>, 289983@bugs.debian.org
Wed, 12 Jan 2005 09:38:25 +0200


Package: libmime-lite-perl
Version: 3.01-3
Severity: important
Tags: patch

PATH environment variable is set to '/bin:/usr/bin' even in non-tainted
mode. I suppose that line 337 in MIME/Lite.pm should look like:

$ENV{PATH} = '/bin:/usr/bin'
  unless ${^TAINT} == 0;

BTW: such PATH line isn't portable to non-UNIX platforms.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7-so
Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R)

Versions of packages libmime-lite-perl depends on:
ii  perl                          5.8.4-5    Larry Wall's Practical Extraction 

-- no debconf information