Red Hat Product Errata RHSA-2017:3269 - Security Advisory

Issued:: 2017-11-28
Updated:: 2017-11-28

RHSA-2017:3269 - Security Advisory

Overview
Updated Packages

Synopsis

Important: procmail security update

Type/Severity

Security Advisory: Important

Topic

An update for procmail is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.

Security Fix(es):

A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Server - Extended Update Support 7.6 x86_64
Red Hat Enterprise Linux Server - Extended Update Support 7.5 x86_64
Red Hat Enterprise Linux Server - Extended Update Support 7.4 x86_64
Red Hat Enterprise Linux Server - AUS 7.6 x86_64
Red Hat Enterprise Linux Server - AUS 7.4 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
Red Hat Enterprise Linux Server - TUS 7.6 x86_64
Red Hat Enterprise Linux Server - TUS 7.4 x86_64
Red Hat Enterprise Linux for ARM 64 7 aarch64
Red Hat Enterprise Linux for Power 9 7 ppc64le
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.6 ppc64le
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.4 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.6 x86_64
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.4 x86_64

Fixes

BZ - 1500070 - CVE-2017-16844 procmail: Heap-based buffer overflow in loadbuf function in formisc.c

CVEs

CVE-2017-16844

References

https://access.redhat.com/security/updates/classification/#important

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Server - Extended Update Support 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Server - Extended Update Support 7.5

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Server - Extended Update Support 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Server - AUS 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Server - AUS 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Workstation 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Desktop 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
s390x
procmail-3.22-36.el7_4.1.s390x.rpm	SHA-256: f2eeee981bcff1fea5d3c9ac81904b08815a05f5327f18c14ee1a38840456bf1
procmail-debuginfo-3.22-36.el7_4.1.s390x.rpm	SHA-256: a774a030cd79253c62af9873d7592cdbb9b1eeee47ea665a6ca0fc499efea5c3

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
s390x
procmail-3.22-36.el7_4.1.s390x.rpm	SHA-256: f2eeee981bcff1fea5d3c9ac81904b08815a05f5327f18c14ee1a38840456bf1
procmail-debuginfo-3.22-36.el7_4.1.s390x.rpm	SHA-256: a774a030cd79253c62af9873d7592cdbb9b1eeee47ea665a6ca0fc499efea5c3

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
s390x
procmail-3.22-36.el7_4.1.s390x.rpm	SHA-256: f2eeee981bcff1fea5d3c9ac81904b08815a05f5327f18c14ee1a38840456bf1
procmail-debuginfo-3.22-36.el7_4.1.s390x.rpm	SHA-256: a774a030cd79253c62af9873d7592cdbb9b1eeee47ea665a6ca0fc499efea5c3

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
s390x
procmail-3.22-36.el7_4.1.s390x.rpm	SHA-256: f2eeee981bcff1fea5d3c9ac81904b08815a05f5327f18c14ee1a38840456bf1
procmail-debuginfo-3.22-36.el7_4.1.s390x.rpm	SHA-256: a774a030cd79253c62af9873d7592cdbb9b1eeee47ea665a6ca0fc499efea5c3

Red Hat Enterprise Linux for Power, big endian 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64
procmail-3.22-36.el7_4.1.ppc64.rpm	SHA-256: d69b9317c4ddf4cd93bad0e3a1ce2b44d974f3fa2151ca51f56b3b2b47373c68
procmail-debuginfo-3.22-36.el7_4.1.ppc64.rpm	SHA-256: 83fcdf4dd22cea5b482ddec39952c2c15bd208c3def6700826e63c74879235a5

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64
procmail-3.22-36.el7_4.1.ppc64.rpm	SHA-256: d69b9317c4ddf4cd93bad0e3a1ce2b44d974f3fa2151ca51f56b3b2b47373c68
procmail-debuginfo-3.22-36.el7_4.1.ppc64.rpm	SHA-256: 83fcdf4dd22cea5b482ddec39952c2c15bd208c3def6700826e63c74879235a5

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64
procmail-3.22-36.el7_4.1.ppc64.rpm	SHA-256: d69b9317c4ddf4cd93bad0e3a1ce2b44d974f3fa2151ca51f56b3b2b47373c68
procmail-debuginfo-3.22-36.el7_4.1.ppc64.rpm	SHA-256: 83fcdf4dd22cea5b482ddec39952c2c15bd208c3def6700826e63c74879235a5

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64
procmail-3.22-36.el7_4.1.ppc64.rpm	SHA-256: d69b9317c4ddf4cd93bad0e3a1ce2b44d974f3fa2151ca51f56b3b2b47373c68
procmail-debuginfo-3.22-36.el7_4.1.ppc64.rpm	SHA-256: 83fcdf4dd22cea5b482ddec39952c2c15bd208c3def6700826e63c74879235a5

Red Hat Enterprise Linux for Power, little endian 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64le
procmail-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: fcba5f9a7b4f6daf8321eafc04efcb88b3b3bc3e8dd570fb572626aace942e99
procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: 0c5e053db21f7b59bca328a9efc0f945a676cf18fa8e31864eb8e6c53fce20b3

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64le
procmail-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: fcba5f9a7b4f6daf8321eafc04efcb88b3b3bc3e8dd570fb572626aace942e99
procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: 0c5e053db21f7b59bca328a9efc0f945a676cf18fa8e31864eb8e6c53fce20b3

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64le
procmail-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: fcba5f9a7b4f6daf8321eafc04efcb88b3b3bc3e8dd570fb572626aace942e99
procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: 0c5e053db21f7b59bca328a9efc0f945a676cf18fa8e31864eb8e6c53fce20b3

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64le
procmail-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: fcba5f9a7b4f6daf8321eafc04efcb88b3b3bc3e8dd570fb572626aace942e99
procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: 0c5e053db21f7b59bca328a9efc0f945a676cf18fa8e31864eb8e6c53fce20b3

Red Hat Enterprise Linux Server - TUS 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Server - TUS 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux for ARM 64 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
aarch64
procmail-3.22-36.el7_4.1.aarch64.rpm	SHA-256: 378376fa7f0c75ffa1e7ef5089f942b925bbc3eb77a12f3d693ff08342e462d0
procmail-debuginfo-3.22-36.el7_4.1.aarch64.rpm	SHA-256: 2a391353ba068af228ec6fe689bc090bcc67daf3d559d3491b176371a572f830

Red Hat Enterprise Linux for Power 9 7

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64le
procmail-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: fcba5f9a7b4f6daf8321eafc04efcb88b3b3bc3e8dd570fb572626aace942e99
procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: 0c5e053db21f7b59bca328a9efc0f945a676cf18fa8e31864eb8e6c53fce20b3

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64le
procmail-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: fcba5f9a7b4f6daf8321eafc04efcb88b3b3bc3e8dd570fb572626aace942e99
procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: 0c5e053db21f7b59bca328a9efc0f945a676cf18fa8e31864eb8e6c53fce20b3

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
ppc64le
procmail-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: fcba5f9a7b4f6daf8321eafc04efcb88b3b3bc3e8dd570fb572626aace942e99
procmail-debuginfo-3.22-36.el7_4.1.ppc64le.rpm	SHA-256: 0c5e053db21f7b59bca328a9efc0f945a676cf18fa8e31864eb8e6c53fce20b3

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.6

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.4

SRPM
procmail-3.22-36.el7_4.1.src.rpm	SHA-256: 0045192843e673b001fbb0f753e7c1175975be1bf49bf12f596a1911ba7efe69
x86_64
procmail-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 0013437344917fb91eb44ec6a2848aeaf626e1ead95fea537aeb978ae172d4b8
procmail-debuginfo-3.22-36.el7_4.1.x86_64.rpm	SHA-256: 43c691d64272030b3b7badb3fc3fcf63f867b0377e5aebad9e08b3e965c175ae

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.