CVE-2016-1238: Digest may load an optional module from the current directory [rt.cpan.org #116512]

[toddr]

Migrated from rt.cpan.org#116512 (status was 'new')

Requestors:

• TONYC@cpan.org

Attachments:

• 0001-CVE-2016-1238-prevent-loading-optional-modules-from-.patch

From tonyc@cpan.org on 2016-07-27 04:07:06
:

As described in the patch this can be used by a local attacker to execute code
as another user.

Patch also available as a pull request at

https://github.com/gisle/digest/pull/3

Tony

[toddr]

@tonycoz this was fixed in ec5f16c Thanks!