Exim 4.93.x + exim.conf 4.5.x: fails to send emails to remote servers

[zEitEr]

Hello,

- FreeBSD 12.1-RELEASE-p2
- perl 5, version 30, subversion 1 (v5.30.1) built for amd64-freebsd-thread-multi
- Exim: 4.93.0.4
- exim.conf update: yes, release 4.5
- BlockCracking: yes
- Easy Spam Fighter: no
- SpamAssassin: no

Emails send to remote servers fail with the error:

2020-03-16 19:13:34 1jDvB8-000Hpr-8r attempt to expand tainted string '$originator_uid'
2020-03-16 19:13:34 1jDvB8-000Hpr-8r failed to expand condition "${perl{check_limits}}" for lookuphost router: syntax error in Exim::expand_string argument: attempt to expand tainted string '$originator_uid' at /etc/exim.pl line 479.

Do you have an idea on how to fix it?

 

[DirectAdmin Support]

I did find this where there might be new bugs with exim:

244322 – mail/exim: 4.93 causes taint issues

bugs.freebsd.org

One thing to try would be to see if downgrading exim to an older 4.92.x version works. Not a fix, but would confirm if this is a newly introduced "taint" issue with the 4.93.x versions.

John

 

[zEitEr]

Good find, John.

Yes, downgrading to 4.92.x seems to help:

Exim version 4.92.3 #5 built 17-Mar-2020 04:45:17

So Exim: 4.93.0.4 does not have those patches? Or they do not work well?

 

[cpet]

I submited an issue and custmbuild should be updated with patches. in the mean time we are stuck with 4.92.3. I spent countless hours with this and managed to get fed up enough to just downgrade something I almost never do.

 

[cpet]

the only other is to use the patches from the freebsd port which is known to work.

[ports] Index of /head/mail/exim/files

svnweb.freebsd.org

all the files that say "fluffy: attempt to fix taint.." work im just sad to see custombuild doesn't have them.