-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 11 Feb 2015 16:41:40 +0100 Source: procmail Binary: procmail Architecture: source amd64 Version: 3.22-24 Distribution: unstable Urgency: medium Maintainer: Santiago Vila <sanvila@debian.org> Changed-By: Santiago Vila <sanvila@debian.org> Description: procmail - Versatile e-mail processor Closes: 769937 Changes: procmail (3.22-24) unstable; urgency=medium . * Fix two memory corruption problems in formail. Closes: #769937. Reported by Jakub Wilk. Patch by Jan Darmochwal. Thanks a lot. The problems are the following: - Off-by-one heap overflow when parsing addresses that have left angle bracket, then a comma, but no right angle bracket: <moo@example.com, - Off-by-one heap overflow when parsing addresses that end with backslash: <moo@example.com\ Checksums-Sha1: dafa9c9b6480c79c339ac45e1788bc9aba4992d3 1305 procmail_3.22-24.dsc 75493492a9c1375cda8394e6a3a723a60641fb8f 19856 procmail_3.22-24.debian.tar.xz 54ed2d51db0e76f027f06068ab5371048c13434c 139642 procmail_3.22-24_amd64.deb Checksums-Sha256: 361b72a5e53dbb8938bd2b6286d2e55708193f8af713aecb833fa3eb55254e25 1305 procmail_3.22-24.dsc 6d50a9a4a11b4ab59e18f45e1ff7fbcf224c3fe11649fd828052345219f90395 19856 procmail_3.22-24.debian.tar.xz 4488cf6975af9134a9b5238d5d70e8be277f70caa45a840dfbefd2dc444bfe7f 139642 procmail_3.22-24_amd64.deb Files: 371a7a820c0d7d7fc119613a5dace1c6 1305 mail standard procmail_3.22-24.dsc 6c44b5bd4910002086159e3d9ed188d6 19856 mail standard procmail_3.22-24.debian.tar.xz 39614c288469b7c2d822bbad5e153bec 139642 mail standard procmail_3.22-24_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJU23nnAAoJEEHOfwufG4sy6vkH/RouU96tFNbh+69741Ncw0D5 nBfa3RM3XUtwvlYnOeCsQ6Z/gMH9dI2vyPDLmfqW5nSzf0w91BU5WtetqN2Y6kRU /bNJzC6EapP57E0N4AD6CpqaMPDImLVIPKruJ+/9rUypG1gPXM62CH83GmIGabNp jU5x2awZLZGW9XAdw3bA5iooXPBoaeoE2zCR5F2YzyqlQT2FQGXU62KIJfWWUIrB NxjqYtfbRtx5Fhrh7tFDbSCzYr0Ao5ermFxuI2MqDe9Zz//q0ApoCtcutojFDlXC IsNBwZwjExDgthuFWGkxjRPN4eBgWMROl0Cru0LbmRID7tTGGwJq023dR21wVVY= =ML9F -----END PGP SIGNATURE-----
