Does this look like some obscure bug in these versions of perl?
Based on the information you've given so far, it sounds like a bug somewhere, but more likely in one of the dependent modules. As a starting point I suggest getting the module versions for yourself: usually use Some::Module; print $Some::Module::VERSION; should be enough. You may also need to check any other modules used by qw{ File::Spec File::Spec::Unix File::Temp } that could possibly be getting involved.
My first guess is that one of the modules initializes a package variable or file-scope lexical in a way that happens to taint it from one of your $pathdir calls, and tempdir() then calls into the same module in a way that causes it to use that variable.
If you're lucky you might also find something that stands out as relevant in the changelog files of the relevant packages.
In reply to Re: Revisiting Insecure dependency in mkdir while running with -T switch at ... File/Temp.pm line 542
by hv
in thread Revisiting Insecure dependency in mkdir while running with -T switch at ... File/Temp.pm line 542
by sidney
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |