[exim] New taint mismatch problems in exim 4.93

[Heiko Schlichting via Exim-users]

Hi,

unfortunately I see taint mismatch problems in 4.93 (HEAD of master¹)
again.

Using a redirect router:

    require_files = <; /file/system/path/${quote_local_part:$local_part}

    or

    file = /file/system/path/${quote_local_part:$local_part}

Error message for local_part "test":

t...@doma.in cannot be resolved at this time: Tainted name 
'/file/system/path/test' for file read not permitted

$local_part is already checked in ACLs not containing unusual chars and not
starting with a dot.

Any idea?

Regards,
Heiko

¹ commit b273058

Heiko Schlichting                Freie Universität Berlin
heiko.schlicht...@fu-berlin.de   Zentraleinrichtung für Datenverarbeitung
Telefon +49 30 838-54327         Fabeckstraße 32
Telefax +49 30 838454327         14195 Berlin

smime.p7s
Description: S/MIME cryptographic signature

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/