The recent update of the mail/p5-Mail-SpamAssassin port resulted in numerous log file entries like the following: Sep 25 14:18:44 happy-idiot-talk spamd[6385]: razor2 check skipped: Insecure dependency in connect while running setuid at /usr/local/lib/perl5/5.8.0/mach/IO/Socket.pm line 114, <GEN78> line 64. This appears to be same as bug #2439 in the SpamAssassin bugzilla: http://bugzilla.spamassassin.org/show_bug.cgi?id=2439 Their analysis is that the latest Spamassassin is exposing some unsafe taint-mode behaviour in the Razor2 code: http://article.gmane.org/gmane.mail.spam.spamassassin.general/29666 Fix: The patches given in the gmane.org article are effective at curing the problem. I applied them directly to the installed Razor2 perl code, so paths aren't correct for putting the below directly into ports. How-To-Repeat: Run SpamAssassin spamd/spamc programs with the Razor checks enabled.
Responsible Changed From-To: freebsd-ports-bugs->leeym Over to maintainer
State Changed From-To: open->closed Committed, thanks.