more perl 5.8.9 issues? Or did I miss a patch in between testing updates 
and patching?

Mar 22 23:00:27 mx1 amavis[34688]: (34688-15) (!)Decoding of p002 (Zip 
archive data, at least v2.0 to extract) failed, leaving it unpacked: 
Insecure dependency in sysopen while running with -T switch at 
/usr/local/lib/perl5/5.8.9/mach/IO/File.pm line 180.
happening since I upgraded to perl 5.8.9 (I HATE perl upgrades)

I THINK I had these and patches installed. (from amavisd-new ports)

-            $mp->open($mbxname, O_APPEND|O_WRONLY, 0640)
+            # O_WRONLY etc. can become tainted in Perl5.8.9 [perlbug 
#62502]
+            $mp->open($mbxname, untaint(O_APPEND|O_WRONLY), 0640)

is this TWO different issues?


File.pm looks like:
$VERSION = "1.14";

zips look like this:

pkg_info | grep -i 'p5.*zlib'
p5-Compress-Raw-Zlib-2.008 Low-Level Interface to zlib compression library
p5-Compress-Zlib-2.008 Perl5 interface to zlib compression library
p5-IO-Compress-Zlib-2.008 Perl5 interface for reading and writing of 
(g)zip files
p5-IO-Zlib-1.07     IO:: style interface to Compress::Zlib

upgraded to freebsd ports 2.6.2_2,1 just to make sure I didn't miss a patch
(but I was running 2.6.2_1,1)

(I don't see p5-IO-Zlib 2.0 in freebsd ports or on cpan, what is this 
referring to?
Zip archive data, at least v2.0 to extract)

-- 
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
 > *| *SECNAP Network Security Corporation

    * Certified SNORT Integrator
    * 2009 Hot Company Award Finalist, World Executive Alliance
    * Five-Star Partner Program 2009, VARBusiness
    * Best Anti-Spam Product 2008, Network Products Guide
    * King of Spam Filters, SC Magazine 2008

_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/
_________________________________________________________________________

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to