commit fa69dada219fd6939ffada3cba449b627769f9d3 Author: Fredrik Rinnestam <fredrik@crux.nu> Date: Thu Sep 4 18:45:33 2014 +0200 [notify] procmail: took maintainership. Added patch for CVE-2014-3618 diff --git a/procmail/.md5sum b/procmail/.md5sum index 29a6356..20c8256 100644 --- a/procmail/.md5sum +++ b/procmail/.md5sum @@ -1,2 +1,3 @@ +85a52f5866ec79d310bac82e49d95c82 CVE-2014-3618.patch 1678ea99b973eb77eda4ecf6acae53f1 procmail-3.22.tar.gz 4644c7cd572dbd63d56ffc632b092860 procmail-getline.patch diff --git a/procmail/CVE-2014-3618.patch b/procmail/CVE-2014-3618.patch new file mode 100644 index 0000000..aa90e1f --- /dev/null +++ b/procmail/CVE-2014-3618.patch @@ -0,0 +1,16 @@ +--- formisc.c 2013-08-04 00:13:33.000000000 -0700 ++++ formisc.c 2014-09-03 11:42:25.986002396 -0700 +@@ -84,12 +84,11 @@ + case '"':*target++=delim='"';start++; + } + ;{ int i; +- do ++ while(*start) + if((i= *target++= *start++)==delim) /* corresponding delimiter? */ + break; + else if(i=='\\'&&*start) /* skip quoted character */ + *target++= *start++; +- while(*start); /* anything? */ + } + hitspc=2; + } diff --git a/procmail/Pkgfile b/procmail/Pkgfile index debde3d..2d4f051 100644 --- a/procmail/Pkgfile +++ b/procmail/Pkgfile @@ -1,12 +1,12 @@ # Description: Versatile mail delivery agent/filter # URL: http://www.procmail.org/ -# Maintainer: Juergen Daubert, jue at crux dot nu +# Maintainer: Fredrik Rinnestam, fredrik at crux dot nu name=procmail version=3.22 -release=3 +release=4 source=(ftp://ftp.fu-berlin.de/pub/unix/mail/procmail/$name-$version.tar.gz - $name-getline.patch) + $name-getline.patch CVE-2014-3618.patch) build() { cd $name-$version