Bug#794963: libnet-xmpp-perl: "Insecure dependency in eval (...) at /usr/share/perl5/Net/XMPP/Protocol.pm line 1007."
Axel Beckert
abe at debian.org
Mon Aug 10 01:06:15 UTC 2015
Hi Christoph,
Christoph Biedl wrote:
> > Can you give me some example code which triggers this issue so that I
> > can test if it's fixed with the new upstream release?
>
> It's rather simple: Use Net::XMPP while running setuid. So execute the
> following code as root after adjusting the server information and
> credentials, login must succeed to trigger the error.
Thanks a lot!
Will try it as soon as I get the new upstream release to build
properly.
Regards, Axel
--
,''`. | Axel Beckert <abe at debian.org>, http://people.debian.org/~abe/
: :' : | Debian Developer, ftp.ch.debian.org Admin
`. `' | 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5
`- | 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE
More information about the pkg-perl-maintainers
mailing list