DSA-4041-1 procmail [Jakub Wilk reported ...]

Article View: pl.comp.os.linux.debian

Article #42708

Back to pl.comp.os.linux.debian Previous Next

#42708

From: Andrzej A. Filip
Date: Mon, 20 Nov 2017 06:42

18 lines
1780 bytes

https://www.debian.org/security/2017/dsa-4041
> DSA-4041-1 procmail -- security update
> Date Reported: 19 Nov 2017
> Affected Packages: procmail 
> Vulnerable: Yes
> Security database references:
>    In the Debian bugtracking system: Bug 876511 [1].
>    In Mitre's CVE dictionary: CVE-2017-16844 [2].
> More information:
>    Jakub Wilk reported a heap-based buffer overflow vulnerability in
>    procmail's formail utility when processing specially-crafted email
>    headers. A remote attacker could use this flaw to cause formail to
>    crash, resulting in a denial of service or data loss. [...]
> [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876511
> [2] https://security-tracker.debian.org/tracker/CVE-2017-16844

-- 
Andrzej A. Filip

Technical Details

Message-ID: <anfi+b4vjmns52f-hbk1@wp.eu>

Path:

mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!news.nask.pl!news.nask.org.pl!news.unit0.net!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!news.nask.pl!news.nask.org.pl!news.unit0.net!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail
From: "Andrzej A. Filip" <anfi@onet.eu>
Newsgroups: pl.comp.os.linux.debian
Subject: DSA-4041-1 procmail [Jakub Wilk reported ...]
Date: Mon, 20 Nov 2017 07:42:34 +0100 (CET)
Organization: It is for me to know and for you to find out.
Lines: 18
Message-ID: <anfi+b4vjmns52f-hbk1@wp.eu>
Mime-Version: 1.0
Injection-Info: reader02.eternal-september.org; posting-host="4cc6b478c2a91f8fb1ae53d2713fa1d8"; logging-data="17138"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18ozWJA0OGIqjTvBiFPQK3Z"
X-Face: 'I)+RZdp>[eh9FU~UPPCP-J1nsFY9"i/>=cR^Zge33g~WOqDK9;ry9]t!e- )+J!&H-m(U([*?ATUu^8V3wIPB;-Sz3(S+$H2QP=?E}b<SAw&/aLAzWB+Qw6dFk\uA) !qYh%.hci4zc_*>
Cancel-Lock: sha1:UI4CP8gnhIYVKgU+XYiQMpTu4j8= sha1:5GPlznlv4ulCsj78kNHYaaMMW78=
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit