]> git.imager.perl.org - imager.git/commit
CVE-2016-1238 mitigation
authorTony Cook <tony@develop-help.com>
Thu, 15 Sep 2016 00:28:09 +0000 (10:28 +1000)
committerTony Cook <tony@develop-help.com>
Thu, 15 Sep 2016 00:28:09 +0000 (10:28 +1000)
commitb1736e02fc399356d27fd45919adde71c192d1c4
tree48fb41c1c0c92688c931e63401d8b9942a53c523
parent9619c400aab403242cc2d7ae13dd714a4bb7ccd6
CVE-2016-1238 mitigation

ensure the default . is removed from @INC when attempting to load
optional modules:

  - file format modules loaded by read(), write() etc and the
    %formats tie code
  - Affix::Infix2Postfix loaded by transform()
  - Parse::RecDescent loaded by Imager::Expr
Imager.pm
lib/Imager/Expr.pm