[MacPorts] #49044: Patch/Update procmail because of CVE-2014-3618
MacPorts
noreply at macports.org
Thu Oct 1 21:47:17 PDT 2015
#49044: Patch/Update procmail because of CVE-2014-3618
-----------------------+--------------------------------
Reporter: sierkb@… | Owner: macports-tickets@…
Type: update | Status: new
Priority: High | Milestone:
Component: ports | Version:
Resolution: | Keywords: security
Port: procmail |
-----------------------+--------------------------------
Comment (by ryandesign@…):
CVE-2014-3618 appears to be from last year.
The Homebrew ticket you reference doesn't seem to talk about any CVE. It
just seems to be the request to add a procmail package to Homebrew.
Part of their ticket seems to talk about using Apple's patched procmail
sources instead of the 14-year-old version 3.22 that we currently use. Are
you claiming that Apple has already fixed the problems mentioned in this
CVE in their sources?
--
Ticket URL: <https://trac.macports.org/ticket/49044#comment:1>
MacPorts <https://www.macports.org/>
Ports system for OS X
More information about the macports-tickets
mailing list