Debian Security Advisory

DLA-1173-1 procmail -- LTS security update

Date Reported:
18 Nov 2017
Affected Packages:
procmail
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2017-16844.
More information:

It was discovered that there was a heap-based buffer overflow in procmail, a tool used to sort incoming mail into various directories and filter out spam messages.

For Debian 7 Wheezy, this issue has been fixed in procmail version 3.22-20+deb7u2.

We recommend that you upgrade your procmail packages.