[Bug 1354386] New: CVE-2016-6185 perl: XSLoader loads relative paths not included in @INC