Error log Insecure dependency in open while running with -T switch at /usr/local/lib/perl5/site_perl/Net/Server/Daemonize.pm line 75. at line 179 in file /usr/local/lib/perl5/site_perl/Net/Server.pm patch --- spampd.org 2015-01-03 16:30:31.000000000 +0900 +++ spampd 2015-01-03 17:17:23.000000000 +0900 @@ -819,6 +819,22 @@ usage(0) if $options{help}; +# Untaint some options provided by admin command line. +$pidfile =~ /^(.*)$/; +$pidfile = $1; + +$relayhost =~ /^(.*)$/; +$relayhost = $1; + +$relayport =~ /^(.*)$/; +$relayport = $1; + +$host =~ /^(.*)$/; +$host = $1; + +$port =~ /^(.*)$/; +$port = $1; + if ( $logsock !~ /^(unix|inet)$/ ) { print "--logsock parameter needs to be either unix or inet\n\n"; usage(0);
The new version 2.42 is on github. Can you provide a patch to update and check whether the issue is still in 2.42 ?
Bug 196534 - mail/spampd: update to spampd-2.42 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196534