Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
203

Mageia 9: 2024-0175 Critical: Mutt Null Pointer Drefs in Email Processing

Null pointer dereference when viewing a specially crafted email in Mutt > 1.5.2 1.5.2 1.5.2 1.5.2

Calendar 2 May 13, 2024 Critical Mageia
98

Severe Buffer Overflow Vulnerability in Procmail for RHEL 7 Systems

An update for procmail is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: procmail security update Advisory ID: RHSA-2017:3269-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2017:3269 Issue date: 2017-11-28 CVE Names: CVE-2017-16844 ==================================================================== 1. Summary: An update for procmail is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) - aarch64, ppc64le 3. Description: The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail. Security Fix(es): * A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844) 4.Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1500070 - CVE-2017-16844 procmail: Heap-based buffer overflow in loadbuf function in formisc.c 6. Package List: Red Hat Enterprise Linux Client Optional (v. 7): Source: procmail-3.22-36.el7_4.1.src.rpm x86_64: procmail-3.22-36.el7_4.1.x86_64.rpm procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: procmail-3.22-36.el7_4.1.src.rpm ppc64: procmail-3.22-36.el7_4.1.ppc64.rpm procmail-debuginfo-3.22-36.el7_4.1.ppc64.rpm ppc64le: procmail-3.22-36.el7_4.1.ppc64le.rpm procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm s390x: procmail-3.22-36.el7_4.1.s390x.rpm procmail-debuginfo-3.22-36.el7_4.1.s390x.rpm x86_64: procmail-3.22-36.el7_4.1.x86_64.rpm procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7): Source: procmail-3.22-36.el7_4.1.src.rpm aarch64: procmail-3.22-36.el7_4.1.aarch64.rpm procmail-debuginfo-3.22-36.el7_4.1.aarch64.rpm ppc64le: procmail-3.22-36.el7_4.1.ppc64le.rpm procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: procmail-3.22-36.el7_4.1.src.rpm x86_64: procmail-3.22-36.el7_4.1.x86_64.rpm procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2017-16844 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFaHd0NXlSAg2UNWIIRAkX6AJ4pLQI+dx8Fm1xHehnwfPc8DMqwTwCeJvsK PWKDWDmjXdT9z5q3RieVuGE=/ACr -----ENDPGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Keep informed about the latest Red Hat notification concerning the procmail security patch that addresses a significant buffer overflow vulnerability.. procmail Security Update, buffer overflow flaw, important security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 28, 2017 Important Red Hat
172

Ubuntu 14.04 LTS USN-2340-1 Critical Procmail Denial Of Service

formail could be made to crash or run programs if it processed specially crafted mail.. =========================================================================Ubuntu Security Notice USN-2340-1 September 04, 2014 procmail vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: formail could be made to crash or run programs if it processed specially crafted mail. Software Description: - procmail: Versatile e-mail processor Details: Tavis Ormandy discovered that the formail tool incorrectly handled certain malformed mail headers. An attacker could use this flaw to cause formail to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: procmail 3.22-21ubuntu0.1 Ubuntu 12.04 LTS: procmail 3.22-19ubuntu0.1 Ubuntu 10.04 LTS: procmail 3.22-18ubuntu1.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2340-1 CVE-2014-3618 Package Information: https://launchpad.net/ubuntu/+source/procmail/3.22-21ubuntu0.1 https://launchpad.net/ubuntu/+source/procmail/3.22-19ubuntu0.1 https://launchpad.net/ubuntu/+source/procmail/3.22-18ubuntu1.1 . Ubuntu Security Notice USN-2341-1 pertains to a postfix flaw impacting several LTS iterations and message processing.. procmail vulnerability, Denial of Service, email processing issue. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 04, 2014 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here