From cc4a2b7ccc77cd29cecf02a6bdebbf60446b4fed Mon Sep 17 00:00:00 2001 From: Packit Service Date: Dec 10 2020 01:34:56 +0000 Subject: Apply patch Digest-0.17-CVE-2016-1238-prevent-loading-optional-modules-from-.patch patch_name: Digest-0.17-CVE-2016-1238-prevent-loading-optional-modules-from-.patch present_in_specfile: true --- diff --git a/Digest.pm b/Digest.pm index c3355a8..b2f1ee1 100644 --- a/Digest.pm +++ b/Digest.pm @@ -38,7 +38,11 @@ sub new unless (exists ${"$class\::"}{"VERSION"}) { my $pm_file = $class . ".pm"; $pm_file =~ s{::}{/}g; - eval { require $pm_file }; + eval { + local @INC = @INC; + pop @INC if $INC[-1] eq '.'; + require $pm_file; + }; if ($@) { $err ||= $@; next;