Security Advisories (1)
CVE-2021-36770 (2021-07-17)

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm (3.05 through 3.11). This issue occurs because the || operator evaluates @INC in a scalar context, and thus @INC has only an integer value.

NAME

Encode::EBCDIC - EBCDIC Encodings

SYNOPSIS

use Encode qw/encode decode/; 
$posix_bc  = encode("posix-bc", $utf8); # loads Encode::EBCDIC implicitly
$utf8 = decode("", $posix_bc);          # ditto

ABSTRACT

This module implements various EBCDIC-Based encodings. Encodings supported are as follows.

Canonical   Alias		Description
--------------------------------------------------------------------
cp37  
cp500  
cp875  
cp1026  
cp1047  
posix-bc

DESCRIPTION

To find how to use this module in detail, see Encode.

SEE ALSO

Encode, perlebcdic