procmail (3.22-26build2) jammy; urgency=high
* No change rebuild for ppc64el baseline bump.
-- Julian Andres Klode <juliank@ubuntu.com> Thu, 24 Mar 2022 17:23:03 +0100
procmail (3.22-26build1) impish; urgency=medium
* No-change rebuild to build packages with zstd compression.
-- Matthias Klose <doko@ubuntu.com> Thu, 07 Oct 2021 12:22:32 +0200
procmail (3.22-26) unstable; urgency=medium
* Fix buffer overflow in loadbuf(). Closes: #876511.
Reported by Jakub Wilk using American Fuzzy Lop.
For reference, this is CVE-2017-16844.
-- Santiago Vila <sanvila@debian.org> Thu, 16 Nov 2017 23:42:36 +0100
procmail (3.22-25) unstable; urgency=low
* Use gzip -n to stop recording current time, and fix mtimes
before building binary package. Closes: #774367.
* Create md5sums in a reproducible way.
-- Santiago Vila <sanvila@debian.org> Fri, 15 May 2015 16:25:36 +0200
procmail (3.22-24) unstable; urgency=medium
* Fix two memory corruption problems in formail. Closes: #769937.
Reported by Jakub Wilk. Patch by Jan Darmochwal. Thanks a lot.
The problems are the following:
- Off-by-one heap overflow when parsing addresses that have left angle
bracket, then a comma, but no right angle bracket: <moo@example.com,
- Off-by-one heap overflow when parsing addresses that end with
backslash: <moo@example.com
-- Santiago Vila <sanvila@debian.org> Wed, 11 Feb 2015 16:41:40 +0100
procmail (3.22-23) unstable; urgency=medium
* Fixed heap overflow in procmail that made it to segfault on
some unusual (but legit) .procmailrc files. Closes: #771958.
Thanks a lot to Tero Marttila.
-- Santiago Vila <sanvila@debian.org> Wed, 03 Dec 2014 23:51:52 +0100
procmail (3.22-22) unstable; urgency=high
* Fixed heap overflow in formail that made it to crash on messages
having specially-crafted headers. Closes: #704675, #760443.
For reference, this is CVE-2014-3618.
-- Santiago Vila <sanvila@debian.org> Thu, 04 Sep 2014 12:08:36 +0200
procmail (3.22-21) unstable; urgency=low
* debian/patches: Try to correlate patches with bugs and Debian releases.
* Really adopt remaining changes from procmail 3.23pre. No code changes
here, just some documentation and RCS Id strings. As a result, this
release now identifies itself as 3.23pre which is a lot closer to reality.
* Removed obsolete Conflicts: suidmanager.
-- Santiago Vila <sanvila@debian.org> Tue, 15 Oct 2013 19:30:30 +0200
procmail (3.22-20) unstable; urgency=low
* Added recommended targets build-arch and build-indep.
* Build with hardening flags. Closes: #674658.
* Added homepage control field.
* Added lintian overrides.
-- Santiago Vila <sanvila@debian.org> Wed, 06 Jun 2012 23:05:24 +0200
procmail (3.22-19) unstable; urgency=low
* Adopted remaining code changes from procmail 3.23pre.
* Changed MTA recommends to "default-mta | mail-transport-agent".
* Changed mailstat to use [:alnum:] instead of 0-9A-Za-z.
Thanks to Juhan Kundla. Closes: #337048.
* Document that the repetition operator is not supported.
Thanks to Justin Pryzby. Closes: #452723.
* Switch to 3.0 (quilt) source format, 27 patches.
-- Santiago Vila <sanvila@debian.org> Mon, 26 Apr 2010 00:23:26 +0200
# For older changelog entries, run 'apt-get changelog procmail'
Generated by dwww version 1.14 on Mon Jan 27 08:08:59 CET 2025.