Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 21 Jan 2015 15:15:04 +0100
From: Jakub Wilk <>
Subject: Re: heap overflow in procmail

* Tavis Ormandy <>, 2014-09-03, 11:52:
>I noticed a heap overflow in procmail when parsing addresses with 
>unbalanced quotes.

Unfortunately, there's more:

Apparently procmail upstream is inactive; and nobody understands how 
this code works.

At this point, I'd recommend that formail users switch to reformail[0], 
which is mostly (but not completely) compatible with formail.


Jakub Wilk

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.