procmail-3.22-36.el7.1

The procmail packages contain a mail processing tool that can be used to create mail servers, mailing lists, sort incoming mail into separate folders or files, preprocess mail, start any program upon mail arrival, or automatically forward selected incoming mail.

Security Fix(es):

* A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, could cause formail to crash or, possibly, execute arbitrary code as the user running formail. (CVE-2017-16844)

CVE-2017-16844
Heap-based buffer overflow in the loadbuf function in formisc.c in
formail in procmail 3.22 allows remote attackers to cause a denial of
service (application crash) or possibly execute arbitrary code via a
crafted e-mail message because of a hardcoded realloc size, a different
vulnerability than CVE-2014-3618.