[MacPorts] #49044: Patch/Update procmail because of CVE-2014-3618

MacPorts noreply at macports.org
Thu Oct 1 21:47:17 PDT 2015


#49044: Patch/Update procmail because of CVE-2014-3618
-----------------------+--------------------------------
  Reporter:  sierkb@…  |      Owner:  macports-tickets@…
      Type:  update    |     Status:  new
  Priority:  High      |  Milestone:
 Component:  ports     |    Version:
Resolution:            |   Keywords:  security
      Port:  procmail  |
-----------------------+--------------------------------

Comment (by ryandesign@…):

 CVE-2014-3618 appears to be from last year.

 The Homebrew ticket you reference doesn't seem to talk about any CVE. It
 just seems to be the request to add a procmail package to Homebrew.

 Part of their ticket seems to talk about using Apple's patched procmail
 sources instead of the 14-year-old version 3.22 that we currently use. Are
 you claiming that Apple has already fixed the problems mentioned in this
 CVE in their sources?

-- 
Ticket URL: <https://trac.macports.org/ticket/49044#comment:1>
MacPorts <https://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list