<html>
<body>
At 09:09 29/05/2003, you wrote:<br>
<blockquote type=cite class=cite cite>Excuse me for being stupid in
advance but I know virtually nothing about<br>
Perl and when I installed the required modules for MailScanner I
used<br>
CPAN as recommended.<br><br>
# perl -MCPAN -e shell<br>
cpan> install SOME::MODULE<br><br>
I silently ignored your patches because I didn't know how to apply
them.</blockquote><br>
<aargh><br>
Sorry but surely this is pretty clear:
<ul>
<li><a href="http://www.zeegee.com/code/perl/MIME-tools/">MIME-tools</a>
<b>with an <a href="mime-tools-patch.htm">important security patch</a>,
<li>and <a href="mime-tools-patch2.htm">a 2nd important security patch</a>,
<li>and a <a href="mime-tools-patch3.htm">3rd important security patch</a>,
<li>and a <a href="mime-tools-patch4.htm">4th important security patch</a></b>
</ul>Doesn't that make the point that the patches might be worth applying?<br><br>
The basic modules are indeed all available from CPAN, but the security patches are not, which is partly why they are in bold. They are very important.<br><br>
If you had followed the MIME-tools link, you would have been able to download the source. On unpacking it, you would have discovered a file called "Installing" which tells you how to build it.<br><br>
I admit I assumed you knew a bit about how to apply a patch (hint: use the "patch" command) but you could always have asked for help rather than just ignoring what were clearly labelled as "important security patches".<br><br>
You need to download the source, patch it, then build and install it.<br>
</aargh><br><br>
I have just added the following to the web page that lists all this stuff:<br><br>
In order to apply the patches to MIME-tools, you will have to download the source (follow the MIME-tools link above), unpack it, apply the 4 patches and then build and install the module by hand. If you don't know how to apply patches, read "man patch". If you don't know how to install a Perl module, then read the "Installing" file in the MIME-tools package you are about to download.<br><br>
Hopefully this is now clearer.<br><br>
<blockquote type=cite class=cite cite>When I installed the modules a lot of compiling seemed to go on, should<br>
I download source, patch it first and then compile it all manually? Or<br>
can I do it afterwards? How? Do I have to reinstall anything?<br><br>
Maybe just one extra line of info on this page would help or is it<br>
somewhere else?<br><br>
<a href="http://www.sng.ecs.soton.ac.uk/mailscanner/install/perl.shtml" eudora="autourl">http://www.sng.ecs.soton.ac.uk/mailscanner/install/perl.shtml</a><br><br>
I just learned how to spell Perl correctly. :-)<br><br>
/Peter Bonivart<br><br>
--Unix lovers do it in the Sun<br><br>
On Wed, 2003-05-28 at 23:31, Julian Field wrote:<br>
> I have been wading through the MIME-tools modules and its security patches<br>
> to see why some people are catching it correctly and some aren't.<br>
><br>
> If you are letting the filename through, you do not have the MIME-tools<br>
> security patches applied correctly. The first patch introduces a variable<br>
> "$BADTOKEN" into MIME/Field/ParamVal.pm. If you do *not* have "BADTOKEN"<br>
> anywhere in ParamVal.pm, you have not applied the security patches correctly.<br>
><br>
> Please check your Perl MIME-tools installations!<br>
><br>
> Jules.</blockquote></body>
<br>
<div>-- </div>
<div>Julian Field</div>
<div><a href="http://www.mailscanner.info/" EUDORA=AUTOURL>www.MailScanner.info</a></div>
MailScanner thanks transtec Computers for their support
</html>