SuSE Update for procmail openSUSE-SU-2014:1114-1 (procmail)

Solution

Please Install the Updated Packages.

Insight

procmail was updated to fix a heap-overflow in procmail's formail utility when processing specially-crafted email headers (bnc#894999, CVE-2014-3618)

Affected

procmail on openSUSE 13.1, openSUSE 12.3

References

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00008.html

Updated on 2015-03-25

Severity

High Severity

Classification

CVE CVE-2014-3618
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

Related Vulnerabilities