[mythtv-commits] Ticket #12895: Mythweb broken since perl upgrade (. not in path anymore)

[MythTV]

#12895: Mythweb broken since perl upgrade (. not in path anymore)
---------------------------------------+---------------------
     Reporter:  stse@…                 |      Owner:  stuartm
         Type:  Bug Report - General   |     Status:  new
     Priority:  major                  |  Milestone:  unknown
    Component:  MythTV - Web Frontend  |    Version:  0.28.0
     Severity:  medium                 |   Keywords:
Ticket locked:  0                      |
---------------------------------------+---------------------
 Hi!

 One of the last Perl updates in Debian removes the "." from the module
 search path in response to CVE-2016-1238.

 The result is that mythweb.pl doesn't find its modules because
 /usr/share/mythtv/mythweb isn't in the perl search path. It seems to
 depend that "." was in the path.

 Here are the apache error logs:
 [Wed Oct 05 15:37:27.302237 2016] [cgi:error] [pid 31732] [client
 84.165.138.227:60430] AH01215: Can't locate modules/stream/handler.pl in
 @INC (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.24.1
 /usr/local/share/perl/5.24.1 /usr/lib/x86_64-linux-gnu/perl5/5.24
 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.24 /usr/share/perl/5.24
 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at
 /usr/share/mythtv/mythweb/mythweb.pl line 67.:
 /usr/share/mythtv/mythweb/mythweb.pl, referer:
 http://osgiliath.gondor/mythweb/tv/recorded
 [Wed Oct 05 15:37:27.302757 2016] [cgi:error] [pid 31732] [client
 84.165.138.227:60430] End of script output before headers: mythweb.pl,
 referer: http://osgiliath.gondor/mythweb/tv/recorded

 Many greetings,

 Stephan

 By the way, your stupid bug tracker doesn't allow mail addresses with a
 "+". According to the RFC an address like a~`*&^$_-={}'?b@<domain> is a
 legal one.

--
Ticket URL: <https://code.mythtv.org/trac/ticket/12895>
MythTV <http://www.mythtv.org>
MythTV Media Center