Gary wrote:

OOPS

> Ralf wrote:

>> Aug  8 20:01:26 mail amavis[13215]: Module Razor2::Client::Version 2.72
>> Ah.

> Ralf, the Debian package maintainer for razor is using a bad version
> of razor. She fixed 2.67, but for some reason will not update the
> 2.72 package to 2.75. You can do this manually. You can install 2.75
> along side 2.72 with no changes to other files. Perl will find 2.75 in
> its path first.

> cd /usr/local/src
> wget  
> http://easynews.dl.sourceforge.net/sourceforge/razor/razor-agents-2.75.tar.bz2
> tar xjvf razor-agents-2.75.tar.bz2 
> cd razor-agents-2.75
> perl Makefile.PL
> make
> make install

> If you want to revert to the Debian version (you will have to if you
> ever want to use a Debian version in the future), the source code version
> will be in /usr/local/lib/perl/5.8.4/Razor2.

> You can simply rm -r /usr/local/lib/perl/5.8.4/Razor2
> (may have to adjust if the perl version changes)
> Then install the new Debian version to install new binaries
> (razor-admin, razor-check etc.) and perl modules.

> Alternately, you could remove version 2.72, and install 2.67 from
> stable, at least it has been patched:

> apt-get remove razor
> apt-get -t stable install razor

> Gary V

Waaay to much coffee, I may have had an unpatched version 2.72 on my
system I was testing with.

Before you do anything, first check for the vulnerability:

wget http://www200.pair.com/mecham/email.txt

razor-check -d email.txt

it should "razor-check finished successfully." if it is patched.

Gary V



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to