-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 16 Nov 2017 23:42:36 +0100 Source: procmail Binary: procmail Architecture: source Version: 3.22-26 Distribution: unstable Urgency: medium Maintainer: Santiago Vila <sanvila@debian.org> Changed-By: Santiago Vila <sanvila@debian.org> Description: procmail - Versatile e-mail processor Closes: 876511 Changes: procmail (3.22-26) unstable; urgency=medium . * Fix buffer overflow in loadbuf(). Closes: #876511. Reported by Jakub Wilk using American Fuzzy Lop. For reference, this is CVE-2017-16844. Checksums-Sha1: c0d1d7fd5b2b09f2df4c33dca5878304459ce040 1320 procmail_3.22-26.dsc e3bc9065f6d2aa7f230ed0b380ab9c103ce56da7 20152 procmail_3.22-26.debian.tar.xz a19b9bfeea58d5e1b5a12429189508ab499488ce 3857 procmail_3.22-26_source.buildinfo Checksums-Sha256: aa1d2edc716c28ce8547b49c36acc745eb4f0a1db1f1d362233a8c81060a3518 1320 procmail_3.22-26.dsc f1b9d15277013f2ae300a73a51417efc4eaf283f3629986dc8470cdab11f9fb3 20152 procmail_3.22-26.debian.tar.xz 95ad70de092dbdd008a81afa52280703a22046e1f01e381d622b3ea4f2ce7988 3857 procmail_3.22-26_source.buildinfo Files: cbcdaa0ff0c9f576dc496bf4054e4a12 1320 mail standard procmail_3.22-26.dsc 56b2ef59dade568b6e5e9ca4e618fec7 20152 mail standard procmail_3.22-26.debian.tar.xz 07d414301b40a88bc9d7de067c323bf9 3857 mail standard procmail_3.22-26_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE1Uw7+v+wQt44LaXXQc5/C58bizIFAloOF7cACgkQQc5/C58b izLmygf9HMG7e8ObDBlFQcFiMqvL+beeTlma62DpolkqbZlSkkfvrG7ZzBa/KWI1 6agCAM08EbZT97MiUvFJIDkoVwjMxpWzVgoUMQ3cEQLZNmIBi9a/sOPuzhriHCuf zCo5S/qPYHa3XfXsnJLBCf1RKvK/4UPJXEnH2doKjjqKcg07MNsHaJA5LN+Y44+W JI0yTIYTqfVZpxIlg5fiVML+SGVYQHfG6WSFUJFQLY8fDLgLeu4jkWxnqiET/r8k T7EhU+49XilLO1P3zC6QaVIJyAvjDPOlnRbJyuS0Uc+1Nav89q+awp5xdGEfyxjt lv50jxOkwWDLur1jXMVVYcZyWUbftg== =HqOO -----END PGP SIGNATURE-----