Bug#794963: libnet-xmpp-perl: "Insecure dependency in eval (...) at /usr/share/perl5/Net/XMPP/Protocol.pm line 1007."

Axel Beckert abe at debian.org
Mon Aug 10 01:06:15 UTC 2015


Hi Christoph,

Christoph Biedl wrote:
> > Can you give me some example code which triggers this issue so that I
> > can test if it's fixed with the new upstream release?
> 
> It's rather simple: Use Net::XMPP while running setuid. So execute the
> following code as root after adjusting the server information and
> credentials, login must succeed to trigger the error.

Thanks a lot!

Will try it as soon as I get the new upstream release to build
properly.

		Regards, Axel
-- 
 ,''`.  |  Axel Beckert <abe at debian.org>, http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-    |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE



More information about the pkg-perl-maintainers mailing list