shield Security update for procmail
slessp4-procmail-13368


This update for procmail fixes the following issues: Security issue fixed: - CVE-2017-16844: Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than CVE-2014-3618. (bnc#1068648)

  • Release Date
    Dec 7 2017
  • References
    Bugzilla: 1068648
    CVEs: CVE-2017-16844
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 ia64
  • Packages
    procmail
    A program for local e-mail delivery
    3.22-240.8.3.1 lock rpm lock src
SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
  • Packages
    procmail
    A program for local e-mail delivery
    3.22-240.8.3.1 lock rpm lock src
SUSE Linux Enterprise Server 11.4 i586
  • Packages
    procmail
    A program for local e-mail delivery
    3.22-240.8.3.1 lock rpm lock src
SUSE Linux Enterprise Server 11.4 s390x
  • Packages
    procmail
    A program for local e-mail delivery
    3.22-240.8.3.1 lock rpm lock src
SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
  • Packages
    procmail
    A program for local e-mail delivery
    3.22-240.8.3.1 lock rpm lock src