Vulnerability Bulletins

DSA-3019 procmail - security update

   
Affected software Debian
 
Boris pi Piwinger and Tavis Ormandy reported a heap overflowvulnerability in procmails formail utility when processingspecially-crafted email headers. A remote attacker could use this flawto cause formail to crash, resulting in a denial of service or dataloss, or possibly execute arbitrary code.

More info:

https://www.debian.org/security/2014/dsa-3019