Debian Security Advisory
DLA-1173-1 procmail -- LTS security update
- Date Reported:
- 18 Nov 2017
- Affected Packages:
- Security database references:
- In Mitre's CVE dictionary: CVE-2017-16844.
- More information:
It was discovered that there was a heap-based buffer overflow in procmail, a tool used to sort incoming mail into various directories and filter out spam messages.
For Debian 7
Wheezy, this issue has been fixed in procmail version 3.22-20+deb7u2.
We recommend that you upgrade your procmail packages.