File::Path::rmtree(): A History of Security Vulnerabilities

• rmtree()'s potential for vulnerability was suspected in 1995 and was very clear from 1997 onward.

• File::Path's history is difficult to trace

  • Move to 'cpan-upstream' in 2007

  • Repository private until 2009, when moved to github

  • Earliest tag in the github repository is from version (and tag) 1.99_01

        commit f3df647ca59154290779b4483fac4e2593e19eb6
        Author:     David Landgren <david@landgren.net>
        AuthorDate: Thu May 17 05:46:15 2007 -0800
        Commit:     Michael G. Schwern <schwern@pobox.com>
        CommitDate: Fri Dec 11 13:37:08 2009 -0800

            initial import of File-Path 1.99_01 from CPAN

            git-cpan-module:   File-Path
            git-cpan-version:  1.99_01
            git-cpan-authorid: DLAND
            git-cpan-file:     authors/id/D/DL/DLAND/File-Path-1.99_01.tar.gz