[debhelper-devel] [debhelper] 01/03: Export PERL_USE_UNSAFE_INC to fix a further set of packages which fail to build with . removed from @INC

Niels Thykier nthykier at moszumanska.debian.org
Sun Aug 14 07:47:20 UTC 2016


This is an automated email from the git hooks/post-receive script.

nthykier pushed a commit to branch master
in repository debhelper.

commit 7b76ca9cac63dfbc35d8d5761846a0f812ab8d33
Author: Dominic Hargreaves <dom at earth.li>
Date:   Wed Jul 20 00:25:25 2016 +0100

    Export PERL_USE_UNSAFE_INC to fix a further set of packages which fail to build with . removed from @INC
    
    Signed-off-by: Niels Thykier <niels at thykier.net>
---
 Debian/Debhelper/Dh_Lib.pm | 5 +++++
 debian/changelog           | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/Debian/Debhelper/Dh_Lib.pm b/Debian/Debhelper/Dh_Lib.pm
index f1b5b4d..336f719 100644
--- a/Debian/Debhelper/Dh_Lib.pm
+++ b/Debian/Debhelper/Dh_Lib.pm
@@ -1265,6 +1265,11 @@ sub set_buildflags {
 
 	return if compat(8);
 
+	# Export PERL_USE_UNSAFE_INC as a transitional step to allow us
+	# to remove . from @INC by default without breaking packages which
+	# rely on this [CVE-2016-1238]
+	$ENV{PERL_USE_UNSAFE_INC}=1;
+
 	eval "use Dpkg::BuildFlags";
 	if ($@) {
 		warning "unable to load build flags: $@";
diff --git a/debian/changelog b/debian/changelog
index b5963a1..65e8c12 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,6 +16,10 @@ debhelper (9.20160709+unreleased) UNRELEASED; urgency=medium
   * dh_install: Apply patch from Sven Joachim to support
     the "debian/tmp" prefix being optional in
     "debian/not-installed".  (Closes: #815506)
+  * Dh_Lib.pm: Apply patch from Dominic Hargreaves to set
+    PERL_USE_UNSAFE_INC to fix a further set of packages
+    which fail to build with . removed from @INC.
+    (Closes: #832436)
 
  -- Niels Thykier <niels at thykier.net>  Sat, 09 Jul 2016 11:51:46 +0000
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debhelper/debhelper.git




More information about the debhelper-devel mailing list