Re: Local Privilege Escalations in needrestart

[Jakub Wilk <jwilk () jwilk net>]

* Qualys Security Advisory <qsa () qualys com>, 2024-11-19 16:25:
> We therefore grepped the ScanDeps module for one of the oldest pitfalls 
> of the Perl programming language: the two-argument form of open(),

When looking for this kind of vulnerabilities a few years ago, I patched 
my Perl interpreter to issue runtime warnings against suspicious 
two-argument open() calls.

The patch still applies cleanly, and apparently even works, so I've 
attached it here. Maybe someone will find it useful.

--
Jakub Wilk

Attachment: perl-two-arg-open.patch
Description: