CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

mail/procmail3.22_11

Local mail delivery agent

Maintainer
sunpoet@FreeBSD.org
Packages
procmail 3.22_11
Upstream
Higher version available: 3.24
CPE
procmail:procmail from the port
WWW
https://github.com/BuGlessRB/procmail
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2014-36187.5published 2014-09-08

Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (2)

VuXML entries whose affected range this version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
CVE-2017-168449.8published 2017-11-16VuXML entry

Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618.

Commits (102)

David W. Chapman Jr. (dwcjr) · 3.15.1_1
Make procmail follow ${PREFIX} Bump PORTREVISION

PR:		16983
Submitted by:	Pete Fritchman <petef@databits.net>
Reviewed by:	will
7eb038d684
Jimmy Olgeni (olgeni) · 3.15.1
Fix typo in comment.
32c1d41f35
Andrey A. Chernov (ache) · 3.15.1
Upgrade to 3.15.1

Submitted by:	AMAKAWA Shuhei <sa264@cam.ac.uk>
f60b29587c
Maxim Sobolev (sobomax) · 3.15
Massive style enforcement - use ^I instead of spaces for variables identation.
2b1a883dc4
Andrey A. Chernov (ache) · 3.15
Upgrade to 3.15
c1997a807b
Andrey A. Chernov (ache) · 3.14
Better variant of .forward line, more close to original
e7a84bde51
Andrey A. Chernov (ache) · 3.14
Fix info about line must be placed in ~/.forward
182ff01f6b
Chris Piazza (cpiazza) · 3.14
Update to use PORTNAME/PORTVERSION
28849e36e9
Andrey A. Chernov (ache)
Upgrade to 3.14
2956f1f7d6
Steve Price (steve)
Remove comment about running 'make install-suid' since we do that already as part of a normal install.

PR:		12934
23d73161fc
Michael Haro (mharo)
FreeBSD.ORG -> FreeBSD.org

Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
65ab34a667
Michael Haro (mharo)
portlint
9b2ffdc46f
David E. O'Brien (obrien)
Change Id->FreeBSD.
f3a9c6c81e
Tim Vanderhoek (hoek)
Commit #3/4 to enforce caps, no period.

FWIW, checkout of these things took 5+hrs, staying on the local
.freebsd.org net w/o hitting the 'net at all.

As promised,

$ time cvs ci
real    67m51.701s
user    0m1.250s
sys     0m5.345s
dd9ff05a6a
Andrey A. Chernov (ache)
upgrade to 3.13.1
c14592d0fe
Andrey A. Chernov (ache)
remove manpages from PLIST
ec51e8d15e
Andrey A. Chernov (ache)
upgrade to 3.12

Submitted by:  Ollivier Robert <roberto@keltia.freenix.fr>
26b15f9517
Tim Vanderhoek (hoek)
Remove more manpages, as part of the great manpage removal project.
751f2992ec
Andrey A. Chernov (ache)
Fix big messages realloc strategy
f921939f94
Andrey A. Chernov (ache)
add majordomo to trusted users list PR: 6337
67009e2c8c
Andrey A. Chernov (ache)
Better fix for '.' problem
ef9bbad664
Andrey A. Chernov (ache)
Remove '.' at the end of chmod command
27e4fe05fd
Andrey A. Chernov (ache)
Upgrade to pre7
f9ae952388
Satoshi Asami (asami)
Conditionalize question about file locking test to !defined(PACKAGE_BUILDING).
bd77d4ec46
Satoshi Asami (asami)
Compress a bunch of manpages.  Remove unnecessary @ directives from PLISTs.

Note: I know that this is going to break some symlinks and/or .so
includes, I will back some of these out as I run into these during
package building.
c98cfd116d
David E. O'Brien (obrien)
CATEGORIES+=  -->  CATEGORIES= And clean up variable ordering (as shown in the handbook) as little.
ad74428818
Satoshi Asami (asami)
Oh my goodness!  Satoshi is finally fed up and decided to "clean up" all the COMMENTs!  No package names, no version numbers, no "this is absolutix-3.1.2" type comments that have zero information contents.

Now, without any bad examples to follow, nobody has an excuse to import
a port with those kind of comments. :)

Phew!  238 ports modified!
95137d2010
Andrey A. Chernov (ache)
Use flock locking as other delivery systems does Move global procmailrc to /usr/local/etc
92e8c91544
Andrey A. Chernov (ache)
Upgrade to 3.11pre4
790651d3b0
Andrey A. Chernov (ache)
Replace do-install with INSTALL_TARGET
1dc0c36a4d
Satoshi Asami (asami)
Add "PREFIX=${PREFIX}" to the do-install target so that things don't go in /bin, /man, etc.  (Note: the last isn't a directory name.)

Also add a comment on why it IS_INTERACTIVE (I need to hit a return).
ca8af5dac8
Andrey A. Chernov (ache)
Upgrade.
342978cb51
Andrey A. Chernov (ache)
Remove setre* hacks, we have working thing now
ef4a2dfdb9
Rich Murphey (rich)
Fix procmail-3.11pre1/Makefile so that it does not ignore the PREFIX.  Otherwise it will install into /usr/local no matter what your bsd.ports.mk defines PREFIX as.

Reviewed by:	Satoshi
51abde3211
Satoshi Asami (asami)
Updates of mail Makefiles!
fad9a3de2f
Satoshi Asami (asami)
Add PKGNAME, and MAINTAINER goes in a section of its own. :)
7daa89e92e
Andrey A. Chernov (ache)
Upgrade.
30edab0d7e
Satoshi Asami (asami)
install should depend on build.
230ac7a61d
Satoshi Asami (asami)
Updated ports Makefiles for mails.
a07b60ed68
Jordan K. Hubbard (jkh)
Add CATEGORIES lines to a whole bunch of port Makefiles.  Some ports are in multiple catagories - I'll expect the various MAINTAINERS to make further adjustments (and add any KEYWORDS lines) themselves.
ac3066bf75
Jordan K. Hubbard (jkh)
This is interactive - only install if we're not in BATCH mode.
9860736c60
Doug Rabson (dfr)
Fixed a sizeof(off_t) != sizeof(int) problem.
410f59d29f
Gary Palmer (gpalmer)
First batch of MD5 checksum files. Only did through to the end of net to both give my fingers a rest & let freefall clear some of it's backlogged mail :-)

The rest will follow later
3217d24fe5
Andrey A. Chernov (ache)
don't install manpages as gzipped, cause problems with this version
5f57568704
Andreas Schulz (ats)
The pre beta version seems to no longer exist, use the procmail-3.10 instead. Add a new patch. formail.c has a variable named daemon that clashes with the daemon function, change the variable to mdaemon instead.
e3a551db89
Jordan K. Hubbard (jkh)
This port is interactive.  Say so.
580e317ddd
Adam David (adam)
New patchlevel from master site
d024a668b3
Andrey A. Chernov (ache)
Some cosmetique changes after consulting with original author
b3f1f7fb20
Andrey A. Chernov (ache)
Need a little patching to install mapages properly, got syntax error instead
13c18210ae
Andrey A. Chernov (ache)
Add install.man to install: target
ffd5679797