Re: compiled template error in Perl 5.26.1

Todd Rinaldo <[email protected]> Fri, 9 Feb 2018 23:25:06 -0600
Newsgroups	gmane.comp.lang.perl.modules.template-toolkit
Message-ID	<[email protected]>
--===============1882936519167315057==
Content-Type: multipart/signed;
 boundary="Apple-Mail=_D0375068-78D5-4A85-B8E3-B7BD1CDE46EF";
 protocol="application/pkcs7-signature"; micalg=sha1


--Apple-Mail=_D0375068-78D5-4A85-B8E3-B7BD1CDE46EF
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_16DD7695-E0B6-43B4-B357-CE7E93127BF3"


--Apple-Mail=_16DD7695-E0B6-43B4-B357-CE7E93127BF3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


> On Feb 9, 2018, at 11:15 PM, Kiss Gabor (Bitman) <kissg-8/[email protected]> =
wrote:
>=20
>> Is there any TT patch to address that problem?  I am sitting on an =
older
>> version of perl and haven't updated for awhile for fear of breaking =
by
>> websites.
>=20
> Add this line to the script:
> use lib '.';

Doing so however, opens you back up to the original vulnerability that =
was closed.

See https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2016-1238 =
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2016-1238>

Instead do:

use lib '/path/to/where/dot/is';



--Apple-Mail=_16DD7695-E0B6-43B4-B357-CE7E93127BF3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D""><br class=3D""><div><blockquote type=3D"cite" class=3D""><div =
class=3D"">On Feb 9, 2018, at 11:15 PM, Kiss Gabor (Bitman) &lt;<a =
href=3D"mailto:kissg-8/[email protected]" class=3D"">kissg-8/[email protected]</a>&gt;=
 wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div =
class=3D""><blockquote type=3D"cite" class=3D"">Is there any TT patch to =
address that problem? &nbsp;I am sitting on an older<br class=3D"">version=
 of perl and haven't updated for awhile for fear of breaking by<br =
class=3D"">websites.<br class=3D""></blockquote><br class=3D"">Add this =
line to the script:<br class=3D"">use lib '.';<br =
class=3D""></div></div></blockquote></div><br class=3D""><div =
class=3D"">Doing so however, opens you back up to the original =
vulnerability that was closed.</div><div class=3D""><br =
class=3D""></div><div class=3D"">See&nbsp;<a =
href=3D"https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2016-1238" =
class=3D"">https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2016-1238<=
/a></div><div class=3D""><br class=3D""></div><div class=3D"">Instead =
do:</div><div class=3D""><br class=3D""></div><div class=3D"">use lib =
'/path/to/where/dot/is';</div><div class=3D""><br class=3D""></div><div =
class=3D""><br class=3D""></div></body></html>=

--Apple-Mail=_16DD7695-E0B6-43B4-B357-CE7E93127BF3--

--Apple-Mail=_D0375068-78D5-4A85-B8E3-B7BD1CDE46EF
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_D0375068-78D5-4A85-B8E3-B7BD1CDE46EF--


--===============1882936519167315057==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KdGVtcGxhdGVz
IG1haWxpbmcgbGlzdAp0ZW1wbGF0ZXNAbGlzdHMub3Vyc2hhY2suY29tCmh0dHBzOi8vbGlzdHMu
b3Vyc2hhY2suY29tL21haWxtYW4vbGlzdGluZm8vdGVtcGxhdGVzCg==

--===============1882936519167315057==--