Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (2)
VuXML entries whose affected range this version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.
Commit #3/4 to enforce caps, no period.
FWIW, checkout of these things took 5+hrs, staying on the local
.freebsd.org net w/o hitting the 'net at all.
As promised,
$ time cvs ci
real 67m51.701s
user 0m1.250s
sys 0m5.345s
Compress a bunch of manpages. Remove unnecessary @ directives from PLISTs.
Note: I know that this is going to break some symlinks and/or .so
includes, I will back some of these out as I run into these during
package building.
Oh my goodness! Satoshi is finally fed up and decided to "clean up" all the COMMENTs! No package names, no version numbers, no "this is absolutix-3.1.2" type comments that have zero information contents.
Now, without any bad examples to follow, nobody has an excuse to import
a port with those kind of comments. :)
Phew! 238 ports modified!
Add "PREFIX=${PREFIX}" to the do-install target so that things don't go in /bin, /man, etc. (Note: the last isn't a directory name.)
Also add a comment on why it IS_INTERACTIVE (I need to hit a return).
Fix procmail-3.11pre1/Makefile so that it does not ignore the PREFIX. Otherwise it will install into /usr/local no matter what your bsd.ports.mk defines PREFIX as.
Reviewed by: Satoshi
Add CATEGORIES lines to a whole bunch of port Makefiles. Some ports are in multiple catagories - I'll expect the various MAINTAINERS to make further adjustments (and add any KEYWORDS lines) themselves.
First batch of MD5 checksum files. Only did through to the end of net to both give my fingers a rest & let freefall clear some of it's backlogged mail :-)
The rest will follow later
The pre beta version seems to no longer exist, use the procmail-3.10 instead. Add a new patch. formail.c has a variable named daemon that clashes with the daemon function, change the variable to mdaemon instead.