Skip Menu |
 

This queue is for tickets about the XML-Compile-SOAP CPAN distribution.

Report information
The Basics
Id: 92920
Status: resolved
Priority: 0/
Queue: XML-Compile-SOAP

People
Owner: Nobody in particular
Requestors: ether [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Uses File::Slurp, known to be buggy and vulnerable
Download (untitled) / with headers
text/plain 483b
I noticed that File::Slurp was listed as a dependency of this distribution. I didn't search in the source to see how/where you were using it, but you should be aware that File::Slurp has a number of issues, some of which are quite serious, such as: https://rt.cpan.org/Ticket/Display.html?id=83126 Given that encoding issues are very important to your module, you are probably affected as well. File::Slurp::Tiny is meant to be a drop-in replacement; Path::Tiny is also excellent.
Subject: Re: [rt.cpan.org #92920] Uses File::Slurp, known to be buggy and vulnerable
Date: Tue, 11 Feb 2014 09:32:59 +0100
To: Karen Etheridge via RT <bug-XML-Compile-SOAP [...] rt.cpan.org>
From: Mark Overmeer <solutions [...] overmeer.net>
Download (untitled) / with headers
text/plain 856b
* Karen Etheridge via RT (bug-XML-Compile-SOAP@rt.cpan.org) [140210 21:00]: Show quoted text
> Mon Feb 10 16:00:19 2014: Request 92920 was acted upon. > Transaction: Ticket created by ETHER > Queue: XML-Compile-SOAP > Subject: Uses File::Slurp, known to be buggy and vulnerable > Ticket <URL: https://rt.cpan.org/Ticket/Display.html?id=92920 > > > I noticed that File::Slurp was listed as a dependency of this > distribution.
Only for the ::XOP extension. Show quoted text
> File::Slurp::Tiny is meant to be a drop-in replacement;
Ok, accepted. -- Thanks, MarkOv ------------------------------------------------------------------------ Mark Overmeer MSc MARKOV Solutions Mark@Overmeer.net solutions@overmeer.net http://Mark.Overmeer.net http://solutions.overmeer.net
fixed in 3.05


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.