Public bug reported:

Binary package hint: mailscanner

After upgrading from jaunty to lucid my mailscanner dies when
constructing a warning message.

When launching mailscanner with debug enabled, I get this:

In Debugging mode, not forking...
Trying to setlogsock(unix)
Building a message batch to scan...
Have a batch of 1 message.
Insecure dependency in eval while running with -T switch at 
/usr/share/MailScanner//MailScanner/Message.pm line 4239, <GEN63> line 1.
Insecure dependency in eval while running with -T switch at 
/usr/share/MailScanner//MailScanner/Message.pm line 4239, <GEN63> line 1.


It is the ConstructWarning sub in /usr/share/MailScanner/MailScanner/Message.pm 
- line 4239 is:

$result = eval "\"$line\"";


As soon as a new infected mail is scanned, mailscanner enters an endless loop - 
no messages are processed anymore. The instance dies and is being respawned 
over and over again.

** Affects: mailscanner (Ubuntu)
     Importance: Undecided
         Status: New

** Branch linked: lp:ubuntu/lucid/mailscanner

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/689411

Title:
  mailscanner died unexpectedly because of eval in taint mode

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to