﻿id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc	mlocked
12895	Mythweb broken since perl upgrade (. not in path anymore)	stse@…	Stuart Auchterlonie	"Hi!

One of the last Perl updates in Debian removes the ""."" from the module search path in response to CVE-2016-1238.

The result is that mythweb.pl doesn't find its modules because /usr/share/mythtv/mythweb isn't in the perl search path. It seems to depend that ""."" was in the path.

Here are the apache error logs:
[Wed Oct 05 15:37:27.302237 2016] [cgi:error] [pid 31732] [client 84.165.138.227:60430] AH01215: Can't locate modules/stream/handler.pl in @INC (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.24.1 /usr/local/share/perl/5.24.1 /usr/lib/x86_64-linux-gnu/perl5/5.24 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.24 /usr/share/perl/5.24 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at /usr/share/mythtv/mythweb/mythweb.pl line 67.: /usr/share/mythtv/mythweb/mythweb.pl, referer: http://osgiliath.gondor/mythweb/tv/recorded
[Wed Oct 05 15:37:27.302757 2016] [cgi:error] [pid 31732] [client 84.165.138.227:60430] End of script output before headers: mythweb.pl, referer: http://osgiliath.gondor/mythweb/tv/recorded

Many greetings,

Stephan

By the way, your stupid bug tracker doesn't allow mail addresses with a ""+"". According to the RFC an address like a~`*&^$_-={}'?b@<domain> is a legal one."	Bug Report - General	closed	major	unknown	Plugin - MythWeb	0.28.0	medium	fixed			0
