Mailing List Archive

[Bug 2602] New: Tainted name '/etc/exim/vfilters/domain.com' for file read not permitted
https://bugs.exim.org/show_bug.cgi?id=2602

Bug ID: 2602
Summary: Tainted name '/etc/exim/vfilters/domain.com' for file
read not permitted
Product: Exim
Version: 4.94
Hardware: x86
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: Filters
Assignee: unallocated@exim.org
Reporter: jhayhoe@liquidweb.com
CC: exim-dev@exim.org

Our mail server updated to exim 4.94-1 earlier in the morning today and mail
delivery started to fail after the update. After the update and restart of exim
we noticed the following errors in the server logs:

2020-06-18 02:38:12.217 [6341] 1jloBg-0001eG-6f == user@domain.com
R=central_filter defer (-1) DT=0.000s: Tainted name
'/etc/exim/vfilters/domain.com' for file read not permitted\n

I've redacted our user and domain in this error message above.

We also noticed the same errors logged for a empty filter file in the same
directory.

Reverting back to exim 4.93-3 resolves the 'Tainted name' errors on our server.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##