Relevant changes:
- Rewrite folder type parsing: corrects handling of MH and maildir
style spools
- v3.14 changed '!' actions too much: revert to v3.13 behavior but
continue to split SENDMAILFLAGS
- Contents of skipped nested blocks could affect 'E', 'e', 'a', and
'A' flags
- Prevent peeking into buffers on "Out of memory" errors
- Unquoted $\var expansions could alter the interpretation of the
following whitespace
- Prevent attempts to set LINEBUF to really huge values
- Optimize SWITCHRC = $_
- Use a secure PATH when processing /etc/procmailrc
- Use 2^31-1 as the maximum score even when sizeof(long)>4
Changes to formail:
- Allow -n with -D and -s again -- corruption couldn't happen after
all
- Don't strip pre-colon whitespace until header is identified
- Properly handle NULs in the body when generating an autoreply that
keeps the body (could coredump)
General:
- Documented that $\var expansions are never split on whitespace
- Removed ':' and '@' from list of characters that can appear in
tempfile names
- Called nice() when shouldn't have
Major changes are:
- Some zero-length extractions using \/ could core dump
- Missed a couple possible overflows
- Support delivery to maildir mailboxes
- Support all styles of mailbox for the mail spool
- Avoid renaming over old messages in directory folders
- fsync() mailboxes before closing them
- Overflows at certain times would confuse procmail
- Root owned lockfiles aren't bogus
Full list of changes are in procmail-3.14/HISTORY.
