Mailing List Archive

Date: 2004-06-20T21:53:35
Editor: 128.200.135.183 <>
Wiki: SpamAssassin Wiki
Page: RazorInsecureDependency
URL: http://wiki.apache.org/spamassassin/RazorInsecureDependency

no comment

Change Log:

------------------------------------------------------------------------------
@@ -38,7 +38,5 @@

but no rejects. If you see rejects you're probably looking at a previously patched or modified Razor2.

-Razor 2.37 may contain these fixes.
-
-Razor 2.40 does: Changes file says "Applied patch from Mark Martinec and Vivek Khera of Amavid to untaint various file targets obtained from user input. This is the same patch pointed to by the SpamAssassin FAQ
+Razor 2.40 contains these fixes already. The Changes file says "Applied patch from Mark Martinec and Vivek Khera of Amavid to untaint various file targets obtained from user input. This is the same patch pointed to by the SpamAssassin FAQ
[http://www.spamassassin.org/released/Razor2.patch]"