Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 25 Nov 2017 08:59:30 -0800 (PST)
From:      Roger Marquis <marquis@roble.com>
To:        freebsd-ports@freebsd.org
Subject:   Re: Procmail Vulnerabilities check
Message-ID:  <nycvar.OFS.7.76.1711250853410.73766@eboyr.pbz>

next in thread | raw e-mail | index | archive | help
Jos Chrispijn wrote:
> Dear sunpoet,
> Noticed this week following issue on procmail.
> ...
> procmail -- Heap-based buffer overflow
> https://vuxml.FreeBSD.org/freebsd/288f7cee-ced6-11e7-8ae9-0050569f0b83.html

Whether mail/procmail is patched or deprecated standard practice has
been to upgrade to mailmaildrop for some years now.  Procmail source is
difficult to read at best, has been unmaintained for a long time and
mailmaildrop is a better tool for this job in almost every way (except
perhaps for macros like TO).

Roger



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?nycvar.OFS.7.76.1711250853410.73766>