More taint mode problems (please help)

Jules Field MailScanner at ecs.soton.ac.uk
Wed Jan 13 16:41:32 GMT 2010


Please can you try the attached patch to TNEF.pm.
Please let me know if it solves the problem or not.

Thanks!
Jules.

On 13/01/2010 16:19, Thomas Lohman wrote:
>
>> I've released 4.79.5, which I would gratefully appreciate you testing.
>
> Hi Julian,
>
> I've installed version 4.79.5 on a RH5 box with perl 5.10.1 and have 
> been running it against our production e-mail traffic and I noticed 
> this morning that taint errors still are happening when processing 
> TNEF attachments.  This is the line which is output when running a 
> single message through in debug mode:
>
> 11:17:22 Insecure dependency in rename while running with -T switch at 
> /usr/local/MailScanner/lib/MailScanner/TNEF.pm line 357.
>  Failed.
>
> Let me know if there is any more information you need or if there is 
> some other patch I may be missing.
>
> thanks much,
>
>
> --tom
>

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: TNEF.pm.patch.gz
Type: application/x-gzip
Size: 534 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100113/e0d194d0/TNEF.pm.patch.gz


More information about the MailScanner mailing list