Publishing details

Changelog

heirloom-mailx (12.5-2+deb7u1build0.14.10.1) utopic-security; urgency=medium

  * fake sync from Debian

heirloom-mailx (12.5-2+deb7u1) wheezy-security; urgency=high

  * Apply patches from Red Hat to address command execution issues:
    + 0011-outof-Introduce-expandaddr-flag.patch
      Disable command execution in email addresses (CVE-2014-7844)
    + 0012-unpack-Disable-option-processing-for-email-addresses.patch
    + 0013-fio.c-Unconditionally-require-wordexp-support.patch
    + 0014-globname-Invoke-wordexp-with-WRDE_NOCMD.patch (CVE-2004-2771)

 -- Steve Beattie <email address hidden>  Tue, 12 May 2015 08:55:27 -0700

Available diffs

Builds

Package files