[debhelper-devel] [debhelper] 01/03: Export PERL_USE_UNSAFE_INC to fix a further set of packages which fail to build with . removed from @INC
Niels Thykier
nthykier at moszumanska.debian.org
Sun Aug 14 07:47:20 UTC 2016
This is an automated email from the git hooks/post-receive script.
nthykier pushed a commit to branch master
in repository debhelper.
commit 7b76ca9cac63dfbc35d8d5761846a0f812ab8d33
Author: Dominic Hargreaves <dom at earth.li>
Date: Wed Jul 20 00:25:25 2016 +0100
Export PERL_USE_UNSAFE_INC to fix a further set of packages which fail to build with . removed from @INC
Signed-off-by: Niels Thykier <niels at thykier.net>
---
Debian/Debhelper/Dh_Lib.pm | 5 +++++
debian/changelog | 4 ++++
2 files changed, 9 insertions(+)
diff --git a/Debian/Debhelper/Dh_Lib.pm b/Debian/Debhelper/Dh_Lib.pm
index f1b5b4d..336f719 100644
--- a/Debian/Debhelper/Dh_Lib.pm
+++ b/Debian/Debhelper/Dh_Lib.pm
@@ -1265,6 +1265,11 @@ sub set_buildflags {
return if compat(8);
+ # Export PERL_USE_UNSAFE_INC as a transitional step to allow us
+ # to remove . from @INC by default without breaking packages which
+ # rely on this [CVE-2016-1238]
+ $ENV{PERL_USE_UNSAFE_INC}=1;
+
eval "use Dpkg::BuildFlags";
if ($@) {
warning "unable to load build flags: $@";
diff --git a/debian/changelog b/debian/changelog
index b5963a1..65e8c12 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,6 +16,10 @@ debhelper (9.20160709+unreleased) UNRELEASED; urgency=medium
* dh_install: Apply patch from Sven Joachim to support
the "debian/tmp" prefix being optional in
"debian/not-installed". (Closes: #815506)
+ * Dh_Lib.pm: Apply patch from Dominic Hargreaves to set
+ PERL_USE_UNSAFE_INC to fix a further set of packages
+ which fail to build with . removed from @INC.
+ (Closes: #832436)
-- Niels Thykier <niels at thykier.net> Sat, 09 Jul 2016 11:51:46 +0000
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debhelper/debhelper.git
More information about the debhelper-devel
mailing list