Hi all, a quickfix 2.6.3 build 19214 is released on sourceforge
https://sourceforge.net/projects/assp/files/ASSP%20V2%20multithreading/2.6.3%20latest%20fixup/ The following fixes are provided (build 19169 -> 19214): - the analyzer now also ask VirusTotal for results, if this option is enabled in ASSP_AFC - ASSP_AFC.pm version 5.12 now detects faked RTF documents as executable content (cve-2012-0158, cve-2017-11882 and others) - if 'genARC' was enabled and foreign Authentication-Results: headers were present in the mail, no ARC-signature was created and an error "error: ARC message parsing failed - unexpected token at /usr/local/lib/perl5/site_perl/Mail/DKIM/ARC/Signer.pm line 254 thread ..." was written to the maillog.txt - the 'two-level-tlds' download URL is changed from http://george.surbl.org/two-level-tlds to http://www.surbl.org/tld/two-level-tlds - george.surbl.org is no longer a valid hostname - the 'three-level-tlds' download URL is changed from http://george.surbl.org/three-level-tlds to http://www.surbl.org/tld/three-level-tlds - george.surbl.org is no longer a valid hostname - If assp was started after a perl version upgrade (eg. as service or daemon), without installing the possibly required perl module Crypt::GOST 1.01 (eg. running the assp module installer again), all encypted configuration parameters and files were destroyed. ASSP now checks at every startup, that the required Crypt::GOST module is installed. If this module is required but missing, ASSP will end immediatly and will write the following error to STDOUT, STDERR and the file moduleLoadErrors.txt. ***** ERROR ***** ERROR ***** ERROR ***** ***** CAN NOT START ASSP - incompatible encryption engine in use ***** ***** ERROR ***** ERROR ***** ERROR ***** ERROR: last time assp was started, the perl module Crypt::GOST was available and used - but now it is not available for any reason (eg. perl upgrade without running the assp module installer script). Please read the installation instructions (eg. run the ./assp.mod/install/mod_inst.pl script) - or install the missing module Crypt::GOST. The source of Crypt::GOST is available at ./assp.mod/Crypt-GOST-1.01.src.tar.gz or at https://sourceforge.net/projects/assp/files/ASSP\%20V2\%20multithreading/ASSP\%20V2\%20module\%20installation/Crypt-GOST/Crypt-GOST-1.01.src.tar.gz . It is mandatory to run the assp module installer script (and to correct all shown errors) before starting assp. It is highly recommended to run 'cpan-outdated -p|cpanm [-n]' or 'cpan> [notest] upgrade' to bring all perl modules uptodate. ASSP will not start until the perl module Crypt::GOST is installed, or its reference is removed from ./notes/loaded_perl_modules.txt . If this reference is removed without installing the Crypt::GOST module, assp will start - but all encryped configuration values and files will become invalid and you'll need to reconfigure them all manually! ***** ERROR ***** ERROR ***** ERROR ***** Thomas DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! *******************************************************
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
