bugtraq - [SECURITY] [DSA 4277-1] mutt security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <E1fqjHa-0004Ew-Ks@seger.debian.org>
Date: Fri, 17 Aug 2018 18:15:34 +0000
From: Salvatore Bonaccorso <carnil@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4277-1] mutt security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4277-1                   security@...ian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
August 17, 2018                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : mutt
CVE ID         : CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352
                 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356
                 CVE-2018-14357 CVE-2018-14358 CVE-2018-14359 CVE-2018-14360
                 CVE-2018-14361 CVE-2018-14362 CVE-2018-14363
Debian Bug     : 904051

Several vulnerabilities were discovered in Mutt, a text-based mailreader
supporting MIME, GPG, PGP and threading, potentially leading to code
execution, denial of service or information disclosure when connecting
to a malicious mail/NNTP server.

For the stable distribution (stretch), these problems have been fixed in
version 1.7.2-1+deb9u1.

We recommend that you upgrade your mutt packages.

For the detailed security status of mutt please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/mutt

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=IHBe
-----END PGP SIGNATURE-----