moalbert

Member
Nov 20, 2002
5
0
151
After i upgrade the cpanel to EDGE90, my neomail still have some problem.

When i try to read the mail in the neomail, it display the following message:
Insecure dependency in require while running with -T switch at /usr/local/cpanel/base/neomail/neomail.pl line 2323

When i try to move the mail to trash, it display the following message:
Insecure dependency in require while running with -T switch at /usr/local/cpanel/base/neomail/neomail.pl line 2447

my server is installed radhat 8.0, cpanel 5.3.0-EDGE90
Help!!!
regard,
moalbert
 

sky

Well-Known Member
Nov 24, 2002
92
0
156
this i solve by changing the theme from xskin to other skin ... hmmmm wonder why i only have it with xskin :(
 

bert

Well-Known Member
Aug 21, 2001
593
0
316
Interesting. Is is constantly happening? What happens if you switch back to Xskin, will it again give you the same error?
 

atjeu

Member
PartnerNOC
Feb 15, 2002
18
0
301
Phoenix, AZ
FROM: Jonathan MillerDATE: 08/26/2002 14:18:14SUBJECT: [Neomail-users] insecure dependency with perl 5.8.0 Saw someone else having this same problem when running setuid root with Perl
5.8.0:

Insecure dependency in open while running with -T switch at
/usr/local/httpd/cgi-bin/neomail.pl line 2775.

I tracked down the tainted variable to be the global $folder which is read
directly from the web form. There is code to validate the variable, but it
still sets off Perl's newer taint check.

Here's the fix I implemented, starting at line 193 in neomail.pl:

my $folder;
my @validfolders;
if ($user) {
my $isvalid = 0;
@validfolders = @{&getfolders()};
if (param(&folder&)) {
my $basketcase = param(&folder&); # CHANGED LINE
foreach my $checkfolder (@validfolders) {
if ($basketcase eq $checkfolder) { # CHANGED LINE
$folder = $checkfolder; # ADDED LINE
$isvalid = 1;
last;
}
}
($folder = 'INBOX') unless ( $isvalid );
} else {
$folder = &INBOX&;
}
}
 

bert

Well-Known Member
Aug 21, 2001
593
0
316
This issue can't be related to Xskin though.