Package: rkhunter
Version: 1.3.2-6
When I read the weekly update reports sent by email by the
/etc/cron.weekly/rkhunter script with IMP webmail, I see two question
marks in the subject, in place of the white space supposed to separate
the "[rkhunter]" tag and the hostname.
This script contains a non-ASCII space on line 24. As you can see in
the dump below, only the first of the two sendmail invocations is
affected.
$ grep '\[rkhunter\]' </etc/cron.weekly/rkhunter | sed -s 's/
*\(\)/\1/' | hexdump -C
00000000 65 63 68 6f 20 22 53 75 62 6a 65 63 74 3a 20 5b |echo "Subject: [|
00000010 72 6b 68 75 6e 74 65 72 5d c2 a0 24 28 68 6f 73 |rkhunter]..$(hos|
00000020 74 6e 61 6d 65 20 2d 66 29 20 2d 20 57 65 65 6b |tname -f) - Week|
00000030 6c 79 20 64 61 74 61 62 61 73 65 20 75 70 64 61 |ly database upda|
00000040 74 65 22 0a 65 63 68 6f 20 22 53 75 62 6a 65 63 |te".echo "Subjec|
00000050 74 3a 20 5b 72 6b 68 75 6e 74 65 72 5d 20 24 28 |t: [rkhunter] $(|
00000060 68 6f 73 74 6e 61 6d 65 20 2d 66 29 20 2d 20 57 |hostname -f) - W|
00000070 65 65 6b 6c 79 20 72 6b 68 75 6e 74 65 72 20 64 |eekly rkhunter d|
00000080 61 74 61 62 61 73 65 20 75 70 64 61 74 65 22 0a |atabase update".|
00000090
I suggest to replace the 0xc2 0xa0 bytes on line 24 by 0x20.
--
Thibault VINCENT
[email protected]
[email protected]
PGP Key : 0x4BA8A39B
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
