Ben Goodwin wrote: >> OK, I see the reference to the patch, but the RPMS don't include it :-\ Theo Van Dinter <[EMAIL PROTECTED]> writes:
> They do in the tarball. But it's not a doc or a tool, or part of the > actual code ... It's in the INSTALL, the README, the announcement, and the Razor2.patch file. Apparently, that's not enough, so perhaps the .rpm and .deb should also print out an install-time warning and stuff all of the major documentation files into /usr/share/doc/spamassassin if it doesn't already. I'm not optimistic, though. >> The README says until at least 2.36 implying 2.36 fixes it, but the patch >> says otherwise. Off to patch my installation. > well, that really should say "through" instead of "until". Actually, the README is pretty darn clear that 2.36 is broken and it does say "through": | Finally, SpamAssassin now runs in "taint mode" by default for improved | security. If you have Razor2 turned on and are using Vipul's Razor 2.22 | or higher (through at least 2.36), you will need to apply a small patch. | The instructions are located in the Razor2.patch file. In addition, the Razor2.patch file is crystal clear that 2.36 still has problems: | This information is originally from http://www.ijs.si/software/amavisd/ | (Thanks to amavisd-new, Mark Martinec, and Vivek Khera!) | | If SpamAssassin is running in taint-mode (the default) and is configured to | call Vipul's Razor 2.22 or higher, then Razor2 checks will fail because the | Razor2 code is not quite taint-safe. The problem is still present in 2.36 | and the SpamAssassin developers do not know when or how this will be | addressed so please don't ask us! | | To apply: cd to the directory /usr/{lib,share}/perl5/.../Razor2 (wherever | the Client subdirectory is located) and apply the patch directly with: And maybe, just maybe, someone who doesn't read the documentation or release announcement and has a problem (which spill "razor2" errors all over the place), will read the documentation *before* posting the same question again: http://www.catb.org/~esr/faqs/smart-questions.html Daniel ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk