More taint mode problems (please help)

[Balázs Mátéffy]

Hello,

I'm using FreeBSD, and I had the same error, after some days on the
mailwatch list they solved it.

You need perl 5.8.8 < this is what I'm using right now and it's working
Or perl 5.10.0

I tried 5.10.1 but it wasn't working!


Regards,

Balázs.

2010/1/5 mog <lists at elasticmind.net>

> On 04/01/2010 15:59, Mike Jakubik wrote:
>
>> Hello,
>>
>> There seems to be more taint mode related problems in the latest version
>> of MS. As of now, most of emails with attachments are unable to process
>> and I'm at a loss on how to fix this as i am not a perl programmer.
>>
>> When running in debug mode the following error is shown.
>>
>> This is perl, v5.8.9 built for amd64-freebsd
>>
>> ---
>> Building a message batch to scan...
>> Have a batch of 1 message.
>> Insecure dependency in open while running with -T switch at
>> /usr/local/lib/perl5/site_perl/5.8.9/mach/IO/File.pm line 185.
>> /usr/local/etc/rc.d/mailscanner: WARNING: failed to start mailscanner
>> ---
>>
>> I tried to manually hack File.pm and added a function to untaint the file
>> open function. This worked, however it triggered another taint mode error
>> inside of MS itself.
>>
>> ---
>> Insecure dependency in chown while running with -T switch at
>> /usr/local/lib/MailScanner/MailScanner/Message.pm line 2505.
>> ---
>>
>> If someone could help i would greatly appreciate it, I'm sure other
>> FreeBSD users will be experiencing this too.
>>
>> Thanks.
>>
>>
>
>
> Hi,
>
> Try upgrading perl to 'perl-5.10.1' and make sure you are using at least
> MailScanner version 'MailScanner-4.79.4' (both from ports). You should find
> that the taint mode problem goes away.
>
> Regards,
> mog
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100105/73a8b5ba/attachment.html