Hi, intrigeri wrote (19 Jun 2012 19:44:19 GMT) : > However, given Net::Server pretends to be taint clean, it does looks > like there's a serious bug in there, that shall be reported and fixed. > I'll try to isolate a minimal testcase and will report it in Debian > and upstream.
I tried building msva-perl 0.8-2 + commit f24706da cherry-picked from upstream. Good news: for some reason, the resulting package does not expose the bug we are discussing :) So I suggest the following plan: 0. ASAP: someone (Iain? Daniel?) reproduces my successful testing result. 1. short-term: push msva-perl 0.8-3 out to unstable, with this commit applied (and perhaps 20e3148 too?) 2. long-term: investigate if there's actually a bug in Net-Server, and if there is, report it properly. Daniel, what do you think? Cheers, -- intrigeri | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org