On Sun, Nov 26, 2017 at 6:05 PM, Ian Zimmerman <i...@very.loosely.org> wrote: > > I don't trust procmail anymore after CVE-2017-16844.
Uh, thanks. Hadn't even heard of that one, but I was on vacation when it hit I think. Bug 522114 has a link to the patch, which works fine with eapply_user with the latest revision of the ebuild in ~arch. I have no idea when the patch will make it into the repo, but that should happen at some point. -- Rich
