rpms/procmail
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fixed buffer overflow in formail

Browse Source 
Resolves: CVE-2014-3618
This commit is contained in:
Jaroslav Škarvada 2014-09-04 16:12:28 +02:00
parent c64b993012
commit 5f06bcd0a9
2 changed files with 25 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
procmail-3.22-CVE-2014-3618.patch Normal file
View File

@ -0,0 +1,18 @@
diff --git a/src/formisc.c b/src/formisc.c
index 338733b..c48df52 100644
--- a/src/formisc.c
+++ b/src/formisc.c
@@ -84,12 +84,11 @@ normal: *target++= *start++;
case '"':*target++=delim='"';start++;
}
;{ int i;
- do
+ while(*start) /* anything? */
if((i= *target++= *start++)==delim) /* corresponding delimiter? */
break;
else if(i=='\\'&&*start) /* skip quoted character */
*target++= *start++;
- while(*start); /* anything? */
}
hitspc=2;
}

8
procmail.spec
View File

@ -8,7 +8,7 @@
Summary: Mail processing program Summary: Mail processing program
Name: procmail Name: procmail
Version: 3.22 Version: 3.22
Release: 35%{?dist} Release: 36%{?dist}
License: GPLv2+ or Artistic License: GPLv2+ or Artistic
Group: Applications/Internet Group: Applications/Internet
# Source: ftp://ftp.procmail.org/pub/procmail/procmail-%{version}.tar.gz # Source: ftp://ftp.procmail.org/pub/procmail/procmail-%{version}.tar.gz
@ -24,6 +24,7 @@ Patch2: procmail_3.22-8.debian.patch
Patch4: procmail-3.22-truncate.patch Patch4: procmail-3.22-truncate.patch
Patch5: procmail-3.22-ipv6.patch Patch5: procmail-3.22-ipv6.patch
Patch6: procmail-3.22-getline.patch Patch6: procmail-3.22-getline.patch
Patch7: procmail-3.22-CVE-2014-3618.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
%description %description
@ -42,6 +43,7 @@ forward certain incoming mail automatically to someone.
%patch4 -p1 -b .truncate %patch4 -p1 -b .truncate
%patch5 -p1 -b .ipv6 %patch5 -p1 -b .ipv6
%patch6 -p1 -b .getline %patch6 -p1 -b .getline
%patch7 -p1 -b .CVE-2014-3618
find examples -type f | xargs chmod 644 find examples -type f | xargs chmod 644
@ -77,6 +79,10 @@ rm -rf ${RPM_BUILD_ROOT}
%{_mandir}/man[15]/* %{_mandir}/man[15]/*
%changelog %changelog
* Thu Sep 4 2014 Jaroslav Škarvada <jskarvad@redhat.com> - 3.22-36
- Fixed buffer overflow in formail
Resolves: CVE-2014-3618
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.22-35 * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.22-35
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild