Bug 131633 - security/amavisd-new: problems with amavisd and perl 5.8.9
Summary: security/amavisd-new: problems with amavisd and perl 5.8.9
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Gabor Kovesdan
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-13 10:10 UTC by Paulius Bulotas
Modified: 2009-02-23 12:00 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Paulius Bulotas 2009-02-13 10:10:01 UTC
From: http://marc.info/?l=amavis-user&m=123376788327981&w=2

The following patch provides a workaround for a Perl5.8.9 bug #62502:

  [perl #62502] Fcntl exported constants become tainted under 5.8.9

where O_WRONLY, O_APPEND and other Fcntl constants can become tainted.

The Perl bug could manifest itself as a taint problem during file-based
quarantining, during MIME decoding, decoding archives and decompressing
mail parts, and possibly elsewhere. The bug is triggered by a legitimate
code in Archive::Zip and affects subsequent operations in amavisd
for the lifetime of the child process.

This only affects perl 5.8.9;  the 5.8.8 and 5.10.0 are fine.

Fix: 

http://marc.info/?l=amavis-user&m=123376788327981&w=2
How-To-Repeat: Use amavisd :)
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2009-02-15 20:49:43 UTC
Responsible Changed
From-To: freebsd-ports-bugs->gabor

Fix synopsis and assign.
Comment 2 dfilter service freebsd_committer freebsd_triage 2009-02-23 11:53:21 UTC
gabor       2009-02-23 11:53:09 UTC

  FreeBSD ports repository

  Modified files:
    security/amavisd-new Makefile 
    security/amavisd-new/files amavisd.sh.in 
  Added files:
    security/amavisd-new/files patch-amavisd 
  Log:
  - Fix SQL logging problem [1]
  - Remove old dependency [1]
  - Add a warning when memdisk is used, because it is unsafe [2]
  - Fix on Perl 5.8.9 [3]
  - Bump PORTREVISION
  
  PR:             ports/130835 [1], ports/131633 [2]
  Submitted by:   Michael Scheidell <scheidell@secnap.net> [1][2]
  
  Revision  Changes    Path
  1.67      +1 -1      ports/security/amavisd-new/Makefile
  1.6       +6 -1      ports/security/amavisd-new/files/amavisd.sh.in
  1.17      +134 -0    ports/security/amavisd-new/files/patch-amavisd (new)
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 3 Gabor Kovesdan freebsd_committer freebsd_triage 2009-02-23 11:55:07 UTC
State Changed
From-To: open->closed

Committed, thanks.