#49044: Patch/Update procmail because of CVE-2014-3618 -----------------------+-------------------------------- Reporter: sierkb@… | Owner: macports-tickets@… Type: update | Status: new Priority: High | Milestone: Component: ports | Version: Resolution: | Keywords: security Port: procmail | -----------------------+-------------------------------- Comment (by ryandesign@…): CVE-2014-3618 appears to be from last year. The Homebrew ticket you reference doesn't seem to talk about any CVE. It just seems to be the request to add a procmail package to Homebrew. Part of their ticket seems to talk about using Apple's patched procmail sources instead of the 14-year-old version 3.22 that we currently use. Are you claiming that Apple has already fixed the problems mentioned in this CVE in their sources? -- Ticket URL: <https://trac.macports.org/ticket/49044#comment:1> MacPorts <https://www.macports.org/> Ports system for OS X