DSA-4041-1 procmail [Jakub Wilk reported ...]

[Andrzej A. Filip‏]

https://www.debian.org/security/2017/dsa-4041
> DSA-4041-1 procmail -- security update
> Date Reported: 19 Nov 2017
> Affected Packages: procmail
> Vulnerable: Yes
> Security database references:
> In the Debian bugtracking system: Bug 876511 [1].
> In Mitre's CVE dictionary: CVE-2017-16844 [2].
> More information:
> Jakub Wilk reported a heap-based buffer overflow vulnerability in
> procmail's formail utility when processing specially-crafted email
> headers. A remote attacker could use this flaw to cause formail to
> crash, resulting in a denial of service or data loss. [...]
> [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511
> [2] https://security-tracker.debian.org/tracker/CVE-2017-16844

--
Andrzej A. Filip