[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: new suid-perl debian security update breaks qmail-scanner!



Turbo Fredriksson wrote:

Quoting Patrick Donker <list@webpagina.nu>:

People,
I found this in the archive and am experiencing the same problem.
I have replaced the line SUIDPERL="${SUIDPERL:-$dir/suidperl}" with
SUIDPERL="${SUIDPERL:-$dir/perl}on line 754 of the ./configure script
(qmail-scanner 1.25), but I still keep on getting the error as
described below.
I am running Sarge with perl-suid 5.8.4-8. How can I fix this because
I am stuck :(

I've made packages for my woody system(s):
/pub/debian/dists/woody-ol2.2/source/Qmail/qmail-scanner_1.22-8.diff.gz
/pub/debian/dists/woody-ol2.2/source/Qmail/qmail-scanner_1.22-8.dsc
/pub/debian/dists/woody-ol2.2/source/Qmail/qmail-scanner_1.22-8_i386.changes
/pub/debian/dists/woody-ol2.2/source/Qmail/qmail-scanner_1.22.orig.tar.gz

They have this fix. The problem is that SUID perl script should NOT
run '/usr/bin/suidperl' but only '/usr/bin/perl' (but be suid).

In my package, I fix this and a whole lot more. I see no reason why the
building of the 'binary' package shouldn't work on sarge...
Ok, where can I find these packages and do you also happen to have a fixed 1.25? I could try and look at your packages to figure out how to make the latest QS work.

Thanks
-Patrick



Reply to: