https://bugzilla.redhat.com/show_bug.cgi?id=1454594 Ralf Corsepius <rc040203@xxxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #4 from Ralf Corsepius <rc040203@xxxxxxxxxx> --- (In reply to Jitka Plesnikova from comment #3) > (In reply to Ralf Corsepius from comment #1) > > I am going to apply unbundling > In build perl-File-Flat-1.04-24.fc27, the './inc' was not removed and > perl(inc::Module::Install) was not added to build-requires. Thanks for catching these. ATM, I am having severe difficulties in keeping a clear head and because I am very upset about this stupidity. > >, but I need to repeat what I pronounced > > before: > > I consider removing . @INC to be a stupidity, which should be reverted - > > This step is not helpful. > This step was done to fix security issue CVE-2016-1238. That is the reason > why we don't want to refuse it. These days all kind of idiocies are being justified with "security". This is one of these. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ perl-devel mailing list -- perl-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to perl-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx