Re: The apt tool chain doesn't seem to sanitize it's environment
On Mon, 24 Mar 2025 13:59:00 -0700, John Darrah <xyllyx@gmail.com>
wrote:
> Insecure $ENV{CDPATH} while running with -T switch at
>/usr/share/perl5/Debian/AdduserLogging.pm line 157.
As this is another instance of probably the same issue in adduser:
Should adduser clear out its environment completely when invoked?
In the mean time, I have added code to adduser to unset $ENV{CDPATH}.
Greetings
Marc
--
----------------------------------------------------------------------------
Marc Haber | " Questions are the | Mailadresse im Header
Rhein-Neckar, DE | Beginning of Wisdom " |
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 6224 1600402
Reply to: