Perl Error

[Jason Ede]

Ok,
I think I can see from the changelog that it was fixed on the last build of version 4.86 and I’m still running 4.85.2. Is the old installed for version 4 still around or do I need to move up to 5?

I’ve also got the old community baruwa in this setup so don’t want to break that if possible. It won’t be affected by the path change to Version 5?
Cheers,

Jason

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 18 January 2018 15:39
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: Perl Error

Yes, but I do not remember. The current release has the fixes.


--
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1   (843) 800-8605
+44 (020) 3883-8605

From: MailScanner [mailto:mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info] On Behalf Of Jason Ede
Sent: Thursday, January 18, 2018 06:30
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: RE: Perl Error

I know old thread, but was the cause to this ever tracked down?

Jason

From: MailScanner [mailto:mailscanner-bounces+j.ede=birchenallhowden.co.uk at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: 30 November 2016 00:17
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: Perl Error

Ok, now it is not doing file checks at all. Apparently that is why I added “-U” a couple years ago.

Issue is still an issue …


-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
+1 - 844-436-6245

On Nov 29, 2016, at 6:51 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

I removed the -U from /usr/sbin/MailScanner and that seems to have cleared the issue.

Now I forgot why I added -U a couple of years ago …

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245

On Nov 29, 2016, at 6:26 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Rick,

If it were only that easy.

Those files are the Perl modules. The problem is buried in the MailScanner code … somewhere …

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245

On Nov 29, 2016, at 6:19 PM, Rick Cooper <rcooper at dwford.com<mailto:rcooper at dwford.com>> wrote:

Look for the tainted item at those lines and untaint them?
On November 29, 2016 6:14:26 PM EST, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:
More info:

Then Dangerous Content Scanning is on, these errors happen. If you turn it off, they go away. I think this may be related to a change in a Perl module somewhere. Maybe IO::File ?  Anyway, I am trying to track this down. So far I have only seen this on CentOS. If anyone can lend a hand, I would appreciate it.

-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245

On Nov 29, 2016, at 5:58 PM, Jerry Benton <jerry.benton at mailborder.com<mailto:jerry.benton at mailborder.com>> wrote:

Anyone have any ideas?


Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.
Insecure dependency in chmod while running with -T switch at /usr/local/share/perl5/Archive/Zip/Member.pm line 517.



-
Jerry Benton
www.mailborder.com<http://www.mailborder.com/>
+1 - 844-436-6245





--
Rick Cooper
Cell 260-414-8566
Fax 260-434-4400



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180118/e6976c64/attachment.html>