--- FuzzyOcr/Config.pm  2012-05-16 15:48:53.613023616 +0200
+++ FuzzyOcr/Config.pm  2012-05-16 15:52:47.830143837 +0200
@@ -625,6 +625,7 @@
                 my $f = "$p/$a";
                 next unless -x $f;
                 $conf->{$b} = $f;
+                $conf->{$b} = Mail::SpamAssassin::Util::untaint_var($conf->{$b});
                 last;
             }
             if (defined $conf->{$b}) {