committing changes in /etc after apt run

Package changes:
-libgd3 2.1.0-5+deb8u4
+libgd3 2.1.0-5+deb8u6
-libmodule-build-perl 0.421000-2
+libmodule-build-perl 0.421000-2+deb8u1
-libnet-dns-perl 0.81-2
+libnet-dns-perl 0.81-2+deb8u1
-mariadb-client 10.0.25-0+deb8u1
-mariadb-client-10.0 10.0.25-0+deb8u1
-mariadb-client-core-10.0 10.0.25-0+deb8u1
-mariadb-common 10.0.25-0+deb8u1
-mariadb-server 10.0.25-0+deb8u1
-mariadb-server-10.0 10.0.25-0+deb8u1
-mariadb-server-core-10.0 10.0.25-0+deb8u1
+mariadb-client 10.0.26-0+deb8u1
+mariadb-client-10.0 10.0.26-0+deb8u1
+mariadb-client-core-10.0 10.0.26-0+deb8u1
+mariadb-common 10.0.26-0+deb8u1
+mariadb-server 10.0.26-0+deb8u1
+mariadb-server-10.0 10.0.26-0+deb8u1
+mariadb-server-core-10.0 10.0.26-0+deb8u1
-openssh-client 1:6.7p1-5+deb8u2
-openssh-server 1:6.7p1-5+deb8u2
-openssh-sftp-server 1:6.7p1-5+deb8u2
+openssh-client 1:6.7p1-5+deb8u3
+openssh-server 1:6.7p1-5+deb8u3
+openssh-sftp-server 1:6.7p1-5+deb8u3
-perl 5.20.2-3+deb8u5
-perl-base 5.20.2-3+deb8u5
-perl-modules 5.20.2-3+deb8u5
-php5-cli 5.6.23+dfsg-0+deb8u1
-php5-common 5.6.23+dfsg-0+deb8u1
-php5-curl 5.6.23+dfsg-0+deb8u1
-php5-fpm 5.6.23+dfsg-0+deb8u1
-php5-gd 5.6.23+dfsg-0+deb8u1
-php5-intl 5.6.23+dfsg-0+deb8u1
+perl 5.20.2-3+deb8u6
+perl-base 5.20.2-3+deb8u6
+perl-modules 5.20.2-3+deb8u6
+php5-cli 5.6.24+dfsg-0+deb8u1
+php5-common 5.6.24+dfsg-0+deb8u1
+php5-curl 5.6.24+dfsg-0+deb8u1
+php5-fpm 5.6.24+dfsg-0+deb8u1
+php5-gd 5.6.24+dfsg-0+deb8u1
+php5-intl 5.6.24+dfsg-0+deb8u1
-php5-mcrypt 5.6.23+dfsg-0+deb8u1
-php5-mysql 5.6.23+dfsg-0+deb8u1
+php5-mcrypt 5.6.24+dfsg-0+deb8u1
+php5-mysql 5.6.24+dfsg-0+deb8u1

diff --git a/.etckeeper b/.etckeeper
index cc29f64fed54fcff7d96e359e0d675581a7bdcf9..e02ec26335413d5bf2c6ca6a16b079c3a657f8e9 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -829,6 +829,7 @@ maybe chmod 0755 'perl'
 maybe chmod 0755 'perl/CPAN'
 maybe chmod 0755 'perl/Net'
 maybe chmod 0644 'perl/Net/libnet.cfg'
+maybe chmod 0644 'perl/sitecustomize.pl'
 maybe chmod 0755 'php5'
 maybe chmod 0755 'php5/cli'
 maybe chmod 0755 'php5/cli/conf.d'

diff --git a/perl/sitecustomize.pl b/perl/sitecustomize.pl
new file mode 100644 (file)
index 0000000..8501cbb
--- /dev/null
+++ b/perl/sitecustomize.pl
@@ -0,0 +1,20 @@
+# This script is only provided as a transition mechanism for
+# removing the current working directory from the library search path
+# in a user-configurable way.
+#
+# It was considered too risky to remove "." from @INC globally in the
+# jessie security update which introduced this file, but administrators
+# are given the option to to override this default by uncommenting the
+# last line of this file.
+#
+# It is hoped that a future update to jessie might change this default,
+# once more is known about the impact on real world Debian systems.
+#
+# However, please note that this facility is expected to be removed after
+# the Debian stretch release, at which point any code in this file will
+# not have any effect.
+#
+# Please see CVE-2016-1238 for background information on the risks
+# of having "." on @INC.
+
+#pop @INC if $INC[-1] eq '.' and !$ENV{PERL_USE_UNSAFE_INC};