Bug 196458
| Summary: | fix mail/spampd insecure options with perl5.18 | ||
|---|---|---|---|
| Product: | Ports & Packages | Reporter: | vfx9as |
| Component: | Individual Port(s) | Assignee: | freebsd-ports-bugs (Nobody) <ports-bugs> |
| Status: | Closed FIXED | ||
| Severity: | Affects Many People | CC: | pi |
| Priority: | --- | ||
| Version: | Latest | ||
| Hardware: | Any | ||
| OS: | Any | ||
The new version 2.42 is on github. Can you provide a patch to update and check whether the issue is still in 2.42 ? Bug 196534 - mail/spampd: update to spampd-2.42 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196534 |
Error log Insecure dependency in open while running with -T switch at /usr/local/lib/perl5/site_perl/Net/Server/Daemonize.pm line 75. at line 179 in file /usr/local/lib/perl5/site_perl/Net/Server.pm patch --- spampd.org 2015-01-03 16:30:31.000000000 +0900 +++ spampd 2015-01-03 17:17:23.000000000 +0900 @@ -819,6 +819,22 @@ usage(0) if $options{help}; +# Untaint some options provided by admin command line. +$pidfile =~ /^(.*)$/; +$pidfile = $1; + +$relayhost =~ /^(.*)$/; +$relayhost = $1; + +$relayport =~ /^(.*)$/; +$relayport = $1; + +$host =~ /^(.*)$/; +$host = $1; + +$port =~ /^(.*)$/; +$port = $1; + if ( $logsock !~ /^(unix|inet)$/ ) { print "--logsock parameter needs to be either unix or inet\n\n"; usage(0);