[Bug 1354386] CVE-2016-6185 perl: XSLoader loads relative paths not included in @INC