Perl Error

[Jason Ede]

I know old thread, but was the cause to this ever tracked down?

Jason

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 30 November 2016 00:17
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: Perl Error

Ok, now it is not doing file checks at all. Apparently that is why I added “-U” a couple years ago.

Issue is still an issue …


-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 - 844-436-6245


On Nov 29, 2016, at 6:51 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

I removed the -U from /usr/sbin/MailScanner and that seems to have cleared the issue.

Now I forgot why I added -U a couple of years ago …

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245


On Nov 29, 2016, at 6:26 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Rick,

If it were only that easy.

Those files are the Perl modules. The problem is buried in the MailScanner code … somewhere …

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245


On Nov 29, 2016, at 6:19 PM, Rick Cooper <rcooper at dwford.com<mailto:rcooper at dwford.com>> wrote:

Look for the tainted item at those lines and untaint them?
On November 29, 2016 6:14:26 PM EST, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
More info:

Then Dangerous Content Scanning is on, these errors happen. If you turn it off, they go away. I think this may be related to a change in a Perl module somewhere. Maybe IO::File ?  Anyway, I am trying to track this down. So far I have only seen this on CentOS. If anyone can lend a hand, I would appreciate it.

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245


On Nov 29, 2016, at 5:58 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Anyone have any ideas?


Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.



-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245







--
Rick Cooper
Cell 260-414-8566
Fax 260-434-4400



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180118/59da7d33/attachment.html>