[Mimedefang] MIME::Tools 5.414 is released

David F. Skoll dfs at roaringpenguin.com
Wed Oct 6 15:55:11 EDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Mark Martinec of the amavis-new development team found a problem
in MIME::Tools that could lead to viruses slipping through if your
disk fills up.  Older versions didn't check that I/O operations
succeeded, so a full disk could result in the virus-scanner
being fed empty mail bodies.

Because of the way MIMEDefang works (the C code verifies all write
operations, and we use /var/spool/MIMEDefang instead of /tmp), this
is pretty unlikely to hit you, but it's still possible.  I'd advise
everyone to upgrade to MIME::Tools 5.414, available at
http://www.mimedefang.org/node.php?id=1 and soon to be on CPAN.

Regards,

David.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFBZE2jdB1gkTPXMwsRAkgiAJ9JeNMMjTAnWP46DWbIWy0ew/og6gCgheee
JBuv4JTK+J0QPwJ7t3XnRSE=
=qRhI
-----END PGP SIGNATURE-----



More information about the MIMEDefang mailing list