Publishing details

• Published on 2018-07-23
• Copied from ubuntu trusty in Private PPA for Ubuntu Security Team by Leonidas S. Barbosa

Changelog

mutt (1.5.21-6.4ubuntu2.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Mishandles a NO response without a msg
    - debian/patches/ubuntu/mutt-CVE-2018-14349.patch: fix in
      imap/command.c.
    - CVE-2018-14349
  * SECURITY UPDATE: Stack-based buffer overflow
    - debian/patches/ubuntu/mutt-CVE-2018-14350-CVE-2018-14358.patch:
      fix in imap/message.c.
    - CVE-2018-14350
    - CVE-2018-14358
  * SECURITY UPDATE: Mishandles a long IMAP status
    - debian/patches/ubuntu/mutt-CVE-2018-14351.patch: fix in
      imap/command.c.
    - CVE-2018-14351
  * SECURITY UPDATE: Integer underflow and stack-based buffer overflow
    - debian/patches/ubuntu/mutt-CVE-2018-14352-CVE-2018-14353.patch:
      fix in imap/util.c.
    - CVE-2018-14352
    - CVE-2018-14353
  * SECURITY UPDATE: Remote arbitrary code execution
    - debian/patches/ubuntu/mutt-CVE-2018-14354-CVE-2018-14357.patch:
      fix in imap/command.c, imap/imap.c, imap/imap_private.h, imap/util.c.
    - CVE-2018-14354
    - CVE-2018-14357
  * SECURITY UPDATE: Directory traversal
    - debian/patches/ubuntu/mutt-CVE-2018-14355.patch: fix in
      imap/util.c.
    - CVE-2018-14355
  * SECURITY UPDATE: Mishandles a zero-lenght UID
    - debian/patches/ubuntu/mutt-CVE-2018-14356.patch: fix in
      pop.c.
    - CVE-2018-14356
  * SECURITY UPDATE: Buffer overflow
    - debian/patches/ubuntu/mutt-CVE-2018-14359.patch: fix in
      base64.c, imap/auth_cram.c, imap/auth_gss.c, protos.h.
    - CVE-2018-14359
  * SECURITY UPDATE: Unsafe character interactions
    - debian/patches/ubuntu/mutt-CVE-2018-14362.patch: fix in
      pop.c.
    - CVE-2018-14362

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 19 Jul 2018 09:35:37 -0300

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el

Built packages

• mutt text-based mailreader supporting MIME, GPG, PGP and threading

• mutt-dbg debugging symbols for mutt

• mutt-dbgsym debug symbols for package mutt

• mutt-patched Mutt Mail User Agent with extra patches

• mutt-patched-dbgsym debug symbols for package mutt-patched

Package files

• mutt-dbg_1.5.21-6.4ubuntu2.2_amd64.deb (1.1 MiB)
• mutt-dbg_1.5.21-6.4ubuntu2.2_arm64.deb (1.1 MiB)
• mutt-dbg_1.5.21-6.4ubuntu2.2_armhf.deb (1.1 MiB)
• mutt-dbg_1.5.21-6.4ubuntu2.2_i386.deb (1.0 MiB)
• mutt-dbg_1.5.21-6.4ubuntu2.2_powerpc.deb (1.0 MiB)
• mutt-dbg_1.5.21-6.4ubuntu2.2_ppc64el.deb (1.3 MiB)
• mutt-dbgsym_1.5.21-6.4ubuntu2.2_amd64.ddeb (1.1 KiB)
• mutt-dbgsym_1.5.21-6.4ubuntu2.2_arm64.ddeb (1.1 KiB)
• mutt-dbgsym_1.5.21-6.4ubuntu2.2_armhf.ddeb (1.1 KiB)
• mutt-dbgsym_1.5.21-6.4ubuntu2.2_i386.ddeb (1.1 KiB)
• mutt-dbgsym_1.5.21-6.4ubuntu2.2_powerpc.ddeb (1.1 KiB)
• mutt-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb (1.1 KiB)
• mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_amd64.ddeb (882 bytes)
• mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_arm64.ddeb (880 bytes)
• mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_armhf.ddeb (880 bytes)
• mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_i386.ddeb (880 bytes)
• mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_powerpc.ddeb (884 bytes)
• mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb (880 bytes)
• mutt-patched_1.5.21-6.4ubuntu2.2_amd64.deb (364.6 KiB)
• mutt-patched_1.5.21-6.4ubuntu2.2_arm64.deb (309.9 KiB)
• mutt-patched_1.5.21-6.4ubuntu2.2_armhf.deb (309.5 KiB)
• mutt-patched_1.5.21-6.4ubuntu2.2_i386.deb (348.3 KiB)
• mutt-patched_1.5.21-6.4ubuntu2.2_powerpc.deb (321.4 KiB)
• mutt-patched_1.5.21-6.4ubuntu2.2_ppc64el.deb (373.9 KiB)
• mutt_1.5.21-6.4ubuntu2.2.diff.gz (202.9 KiB)
• mutt_1.5.21-6.4ubuntu2.2.dsc (2.2 KiB)
• mutt_1.5.21-6.4ubuntu2.2_amd64.deb (807.0 KiB)
• mutt_1.5.21-6.4ubuntu2.2_arm64.deb (752.2 KiB)
• mutt_1.5.21-6.4ubuntu2.2_armhf.deb (751.7 KiB)
• mutt_1.5.21-6.4ubuntu2.2_i386.deb (789.5 KiB)
• mutt_1.5.21-6.4ubuntu2.2_powerpc.deb (761.9 KiB)
• mutt_1.5.21-6.4ubuntu2.2_ppc64el.deb (816.8 KiB)
• mutt_1.5.21.orig.tar.gz (3.5 MiB)