Fixes CVE-2014-3618 (heap overflow in formisc.c allowing denial of service and potential remote execution of arbitrary code). https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3618 Source: http://seclists.org/oss-sec/2014/q3/495 Adopted by Debian as patch '27': https://sources.debian.net/src/procmail/3.22-25/debian/patches/27/ --- a/src/formisc.c +++ b/src/formisc.c @@ -84,12 +84,11 @@ case '"':*target++=delim='"';start++; } ;{ int i; - do + while(*start) if((i= *target++= *start++)==delim) /* corresponding delimiter? */ break; else if(i=='\\'&&*start) /* skip quoted character */ *target++= *start++; - while(*start); /* anything? */ } hitspc=2; } cted'>koszko Wojtek's customized Guix
aboutsummaryrefslogtreecommitdiff
path: root/README
AgeCommit message (Expand)Author
2020-10-23doc: Update README....Maxim Cournoyer
2020-10-22README: Refer to the manual for building from Git....Maxim Cournoyer
2020-06-02doc: Update README to refer to the manual....Ludovic Courtès
2019-11-09doc: Mention value /var to localstatedir option....zimoun
2019-09-04doc: Update 'README'....Ludovic Courtès
2019-01-09build: Require Guile 2.2....Ludovic Courtès
2018-12-02Make Guile-JSON a required dependency....Eric Bavier
2018-11-23Update Guile-SQLite3 URL everywhere....Ludovic Courtès
2018-09-04Switch to Guile-Gcrypt....Ludovic Courtès
2018-06-27doc: Specify Guile-SQLite3 minimum version....Ludovic Courtès
2018-06-14build: Require Guile-SQLite3....Ludovic Courtès
2018-02-26build: Require Guile >= 2.0.13....Ludovic Courtès
2018-01-07doc: Mark zlib as mandatory, libbz2 as optional....Ludovic Courtès
2018-01-01doc: Update requirements in 'README'....Mathieu Lirzin
2017-09-25README: Replace http:// with https:// where applicable.Marius Bakke
2017-03-18build: Require Guile >= 2.0.9....Ludovic Courtès