The new release 0.416 of List::MoreUtils wants the latest and greatest XSLoader (0.22) to resolve this bug: https://rt.cpan.org/Public/Bug/Display.html?id=115808 List::MoreUtils tries to load code from a subdirectory of the current working directory. This could lead to execution of arbitrary code if cwd is untrusted.
This XSLoader issue will obtain a CVE identifier probably <http://seclists.org/oss-sec/2016/q3/21>.
perl-5.22.2-361.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-485dff6060
(In reply to Petr Pisar from comment #1) > This XSLoader issue will obtain a CVE identifier probably > <http://seclists.org/oss-sec/2016/q3/21>. I suspected as much.
perl-5.22.2-353.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-742bde2be7
perl-5.20.3-332.fc22 has been submitted as an update to Fedora 22. https://bodhi.fedoraproject.org/updates/FEDORA-2016-eb2592245b
perl-5.22.2-353.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-742bde2be7
perl-5.22.2-361.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-485dff6060
*** Bug 1354387 has been marked as a duplicate of this bug. ***
perl-5.20.3-332.fc22 has been pushed to the Fedora 22 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-eb2592245b
perl-5.20.3-332.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
perl-5.22.2-361.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.
perl-5.22.2-353.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.