Subject: Safe extension beta2 (security bug-fix)
From: [email-masked] (Malcolm Beattie)
Date: 1 Sep 1995 03:08:09 GMT
Newsgroups: comp.lang.perl.announce,comp.lang.perl.misc

I've found a slight security hole in the beta1 release of the Safe
extension which potentially allows code evaulated in a Safe
compartment limited access to some code outside the compartment.
A bug-fixed release is available as
    ftp://ftp.ox.ac.uk/pub/perl/Safe-b2.tar.gz
The whole thing is only 17K so it's not worth making a patch kit.

A one-line fix is also included which corrects the way $_ and @_ are
shared with compartments which use "package Foo" to switch packages.

--Malcolm

-- 
Malcolm Beattie <[email-masked]>
Oxford University Computing Services
"Widget. It's got a widget. A lovely widget. A widget it has got." --Jack Dee