Please help me!

I have version 1.25 installed on Linux Mandrake 9.1 (perl 5.8.0)
 - copy the MD5 from CD1 /misc to /usr/lib/perl5
 - run setup.pl
 - localhost/cgi-bin/neomail.pl
 - login OK
 - read message NOT WORK, the following messega:

IInsecure dependency in open while running setgid at 
/var/www/cgi-bin/neomail.pl line 2775.

I find this patch, but don't work....

### BEGIN of neomail.pl.patch ###
--- neomail.pl  Mon Aug 26 15:46:56 2002
+++ /usr/local/neomail/cgi-bin/neomail.pl       Mon Aug 26 16:01:31 
2002
@@ -20,7 +20,7 @@

use strict;
no strict 'vars';
-push (@INC, '/var/neomail');
+unshift (@INC, '/var/neomail');
use CGI qw(:standard);
use CGI::Carp qw(fatalsToBrowser);
use Fcntl qw(:DEFAULT :flock);
@@ -196,9 +196,10 @@
   my $isvalid = 0;
   @validfolders = @{&getfolders()};
   if (param("folder")) {
-      $folder = param("folder");
+      my $basketcase=param("folder");
      foreach my $checkfolder (@validfolders) {
-         if ($folder eq $checkfolder) {
+         if ($basketcase eq $checkfolder) {
+            $folder = $checkfolder;
            $isvalid = 1;
            last;
         }
@@ -407,6 +408,7 @@
                  ($filename eq '.') ||
                  ($filename eq '..')
                ) {
+           $filename =~ /^(.*)$/; $filename = $1; # untaint folder
            push (@folders, $filename);
            $totalfoldersize += ( -s "$folderdir/$filename" );
         }
### END of neomail.pl.patch ###

Please help, what can i do?


Godrosi Janos
from Hungary


-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com