Bug#1083186: cdimage.debian.org: Perl warning for find_file.cgi
Kenneth Peck <[email protected]>
| Newsgroups | gmane.linux.debian.devel.cd |
|---|---|
| Message-ID | <70a4b500-954d-431f-b419-77b822ecefe9__12745.349416376$1727923350$gmane$org@kenpeck.com> |
Why am getting this? I am not involved in debian maintenance. On 10/2/2024 2:59 PM, Philipp Kern wrote: > Package: cdimage.debian.org > X-Debbugs-Cc: [email protected] > > Hi, > > In cgi-grnet-01's Apache error log I found this: > >> CGI::param called in list context from >> /srv/cdimage-search.debian.org/cgi-bin/find_file.cgi line 316, this >> can lead to vulnerabilities. See the warning in "Fetching the value >> or values of a single named parameter" at /usr/share/perl5/CGI.pm >> line 414. > > That's printed on every invocation of the script, so it'd be good to > fix it. It is not invoked super often, but a clean error log would be > better. :) > > Kind regards and thanks > Philipp Kern