http://bugzilla.spamassassin.org/show_bug.cgi?id=3966
Summary: insecure dependency in eval while running setuid
Product: Spamassassin
Version: 3.0.1
Platform: PC
OS/Version: FreeBSD
Status: NEW
Severity: normal
Priority: P5
Component: spamc/spamd
AssignedTo: [email protected]
ReportedBy: [EMAIL PROTECTED]
About 0.3% of email is causing spamd to spit out "insecure dependency" error
messages to maillog. This is on a FreeBSD system with SpamAssassin using Perl
5.8.5, and with the system-default Perl being 5.8.0:
Nov 13 00:03:31 hostname spamd[78327]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN8395> line 53._ No such file or directory, continuing
Nov 13 05:41:52 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN2329> line 196._ No such file or directory, continuing
Nov 13 05:42:51 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN2357> line 212._ No such file or directory, continuing
Nov 13 06:03:47 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN3171> line 171._ No such file or directory, continuing
Nov 13 06:16:28 hostname spamd[49066]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN3255> line 70._ No such file or directory, continuing
Nov 13 06:23:38 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN4126> line 177._ No such file or directory, continuing
Nov 13 07:02:29 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN6671> line 212._ No such file or directory, continuing
Nov 13 07:29:32 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN8269> line 111._ No such file or directory, continuing
Nov 13 07:34:32 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN8615> line 186._ No such file or directory, continuing
Nov 13 07:57:20 hostname spamd[46268]: error: Insecure dependency in eval while
running setuid at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgS
tatus.pm line 1669, <GEN9834> line 320._ No such file or directory, continuing
When run through spamassassin manually, the offending messages don't cause a
similar error.
As a workaround, we're running spamassassin in .procmailrc.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
