https://bugzilla.redhat.com/show_bug.cgi?id=1454594 Jitka Plesnikova <jplesnik@xxxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |NEW Resolution|RAWHIDE |--- Keywords| |Reopened --- Comment #3 from Jitka Plesnikova <jplesnik@xxxxxxxxxx> --- (In reply to Ralf Corsepius from comment #1) > I am going to apply unbundling In build perl-File-Flat-1.04-24.fc27, the './inc' was not removed and perl(inc::Module::Install) was not added to build-requires. >, but I need to repeat what I pronounced > before: > I consider removing . @INC to be a stupidity, which should be reverted - > This step is not helpful. This step was done to fix security issue CVE-2016-1238. That is the reason why we don't want to refuse it. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1238 https://bugzilla.redhat.com/show_bug.cgi?id=1355695 -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ perl-devel mailing list -- perl-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to perl-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx