- release 19, fix for CVE-2017-16844

diff --git a/procmail-3.22-CVE-2017-16844.patch b/procmail-3.22-CVE-2017-16844.patch
new file mode 100644 (file)
index 0000000..5e610d7
--- /dev/null
+++ b/procmail-3.22-CVE-2017-16844.patch
@@ -0,0 +1,13 @@
+diff --git a/src/formisc.c b/src/formisc.c
+index 5c2869d..54fd013 100644
+--- a/src/formisc.c
++++ b/src/formisc.c
+@@ -103,7 +103,7 @@ void loadsaved(sp)const struct saved*const sp;          /* load some saved text */
+ }
+                                                           /* append to buf */
+ void loadbuf(text,len)const char*const text;const size_t len;
+-{ if(buffilled+len>buflen)                      /* buf can't hold the text */
++{ while(buffilled+len>buflen)                   /* buf can't hold the text */
+      buf=realloc(buf,buflen+=Bsize);
+   tmemmove(buf+buffilled,text,len);buffilled+=len;
+ }

diff --git a/procmail.spec b/procmail.spec
index dd550bfae905c8435623dc2861338cf9e58527a6..704d116733af8b7bdb60c87772d7ef148b999db4 100644 (file)
--- a/procmail.spec
+++ b/procmail.spec
@@ -11,7 +11,7 @@ Summary(zh_CN.UTF-8): [服务器]分发mail到用户的守护进程
 Summary(zh_TW.UTF-8):  [祀務器]分蛛mail到用戶的佐鰾園評
 Name:          procmail
 Version:       3.22
-Release:       18
+Release:       19
 License:       GPL v2+ or Artistic
 Group:         Applications/Mail
 Source0:       http://www.procmail.org/%{name}-%{version}.tar.gz
@@ -29,6 +29,7 @@ Patch5:               procmail_3.22-8.debian.patch
 Patch6:                procmail-3.22-CVE-2014-3618.patch
 Patch7:                procmail-3.22-ipv6.patch
 Patch8:                procmail-3.22-truncate.patch
+Patch9:                procmail-3.22-CVE-2017-16844.patch
 URL:           http://www.procmail.org/
 BuildRoot:     %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
 
@@ -102,6 +103,7 @@ listesi yazılımının temelini oluşturur.
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
+%patch9 -p1
 
 %build
 echo "" | %{__make} \