Change DISTNAME from procmail-3.10pre3 (does not exist) to procmail-3.10pre4 (exist and checked to work)0fc3cca6f7
procmail -- Heap-based buffer overflowentered 2017-11-21
Port details
mail/procmail3.22_11
Local mail delivery agent
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- procmail 3.22_11
- Upstream
- Higher version available: 3.24
- CPE
procmail:procmailfrom the port- WWW
- https://github.com/BuGlessRB/procmail
- Links
- cgit · VuXML
Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE
| CVE-2014-3618 | 7.5 | 2014-09-08 | Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via … |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (2)
Show 2 fixed
VuXML entries whose affected range this version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
| CVE-2017-16844 | 9.8 | 2017-11-16 | VuXML · Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or p… |
Commits (102)
Brought in procmailf012d4309d