>>>>> "ML" == Mike Loiterman <[EMAIL PROTECTED]> writes:

ML> I followed the instuructions below to patch Razor2's taint problem. 
ML> The Config.pm patch worked perfectly, but the Core.pm patch failed at
ML> hunk 1.  Is this an SA issue, or a Razor issue..(i.e. patch created
ML> by Razor folks or SA folks)?

It is a Razor issue.  I've submitted patches to them twice so far, but
apparently they don't believe in security thru taint-mode in perl.
Their choice.

I posted my latest patches for razor 2.34 here a few days ago.  I
don't user razor anymore since it has been pretty ineffective for me.
Thus I don't have a suitable patch for taint-safeness for anything
newer.


-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Vivek Khera, Ph.D.                Khera Communications, Inc.
Internet: [EMAIL PROTECTED]       Rockville, MD       +1-240-453-8497
AIM: vivekkhera Y!: vivek_khera   http://www.khera.org/~vivek/


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to