Perl Error

Thu Jan 18 15:39:05 UTC 2018

Yes, but I do not remember. The current release has the fixes. 

--

Jerry Benton

 <http://www.mailborder.com/> www.mailborder.com
+1   (843) 800-8605

+44 (020) 3883-8605

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jason Ede
Sent: Thursday, January 18, 2018 06:30
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: RE: Perl Error

I know old thread, but was the cause to this ever tracked down?

Jason

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 30 November 2016 00:17
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: Perl Error

Ok, now it is not doing file checks at all. Apparently that is why I added “-U” a couple years ago. 

Issue is still an issue … 

-
Jerry Benton
www.mailborder.com <http://www.mailborder.com> 
+1 - 844-436-6245

On Nov 29, 2016, at 6:51 PM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

I removed the -U from /usr/sbin/MailScanner and that seems to have cleared the issue. 

Now I forgot why I added -U a couple of years ago … 

-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245

On Nov 29, 2016, at 6:26 PM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

Rick,

If it were only that easy. 

Those files are the Perl modules. The problem is buried in the MailScanner code … somewhere … 

-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245

On Nov 29, 2016, at 6:19 PM, Rick Cooper <rcooper at dwford.com <mailto:rcooper at dwford.com> > wrote:

Look for the tainted item at those lines and untaint them? 

On November 29, 2016 6:14:26 PM EST, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

More info:

Then Dangerous Content Scanning is on, these errors happen. If you turn it off, they go away. I think this may be related to a change in a Perl module somewhere. Maybe IO::File ?  Anyway, I am trying to track this down. So far I have only seen this on CentOS. If anyone can lend a hand, I would appreciate it. 

-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245

On Nov 29, 2016, at 5:58 PM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com> > wrote:

Anyone have any ideas?

Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.

-
Jerry Benton
www.mailborder.com <http://www.mailborder.com/> 
+1 - 844-436-6245

-- 
Rick Cooper 
Cell 260-414-8566
Fax 260-434-4400

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180118/3dd439c7/attachment.html>