Could you please try the following patch:
--- amavisd~ Wed Dec 12 12:28:26 2007
+++ amavisd Thu Jan 10 14:51:53 2008
@@ -13164,5 +13164,5 @@
for my $bank_name (@$bank_names_ref) { # additional banks from the request
if (defined $policy_bank{$bank_name})
- { Amavis::load_policy_bank($bank_name); $policy_changed = 1 }
+ { Amavis::load_policy_bank(untaint($bank_name)); $policy_changed = 1 }
}
my($sender) = $msginfo->sender;
Mark
-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
