Format: 1.8
Date: Thu, 19 Jul 2018 09:35:37 -0300
Source: mutt
Binary: mutt mutt-patched mutt-dbg
Architecture: ppc64el ppc64el_translations
Version: 1.5.21-6.4ubuntu2.2
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-002.buildd>
Changed-By: Leonidas S. Barbosa <leo.barbosa@canonical.com>
Description: 
 mutt       - text-based mailreader supporting MIME, GPG, PGP and threading
 mutt-dbg   - debugging symbols for mutt
 mutt-patched - Mutt Mail User Agent with extra patches
Changes: 
 mutt (1.5.21-6.4ubuntu2.2) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: Mishandles a NO response without a msg
     - debian/patches/ubuntu/mutt-CVE-2018-14349.patch: fix in
       imap/command.c.
     - CVE-2018-14349
   * SECURITY UPDATE: Stack-based buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14350-CVE-2018-14358.patch:
       fix in imap/message.c.
     - CVE-2018-14350
     - CVE-2018-14358
   * SECURITY UPDATE: Mishandles a long IMAP status
     - debian/patches/ubuntu/mutt-CVE-2018-14351.patch: fix in
       imap/command.c.
     - CVE-2018-14351
   * SECURITY UPDATE: Integer underflow and stack-based buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14352-CVE-2018-14353.patch:
       fix in imap/util.c.
     - CVE-2018-14352
     - CVE-2018-14353
   * SECURITY UPDATE: Remote arbitrary code execution
     - debian/patches/ubuntu/mutt-CVE-2018-14354-CVE-2018-14357.patch:
       fix in imap/command.c, imap/imap.c, imap/imap_private.h, imap/util.c.
     - CVE-2018-14354
     - CVE-2018-14357
   * SECURITY UPDATE: Directory traversal
     - debian/patches/ubuntu/mutt-CVE-2018-14355.patch: fix in
       imap/util.c.
     - CVE-2018-14355
   * SECURITY UPDATE: Mishandles a zero-lenght UID
     - debian/patches/ubuntu/mutt-CVE-2018-14356.patch: fix in
       pop.c.
     - CVE-2018-14356
   * SECURITY UPDATE: Buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14359.patch: fix in
       base64.c, imap/auth_cram.c, imap/auth_gss.c, protos.h.
     - CVE-2018-14359
   * SECURITY UPDATE: Unsafe character interactions
     - debian/patches/ubuntu/mutt-CVE-2018-14362.patch: fix in
       pop.c.
     - CVE-2018-14362
Checksums-Sha1: 
 a2fcbb143e2f6d266d55cd57614a15c35e006e48 836398 mutt_1.5.21-6.4ubuntu2.2_ppc64el.deb
 a5785bf8198f4570dfe114ee4bc96485aa83d4d2 382920 mutt-patched_1.5.21-6.4ubuntu2.2_ppc64el.deb
 111ada4639692e377856375d5bfc7281956606d4 1376508 mutt-dbg_1.5.21-6.4ubuntu2.2_ppc64el.deb
 44a09cf65a5aeacf47879ebbde873e05bc6a2533 1158 mutt-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb
 fff8fda23100f29b4d85efce9e28d845cd09c007 880 mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb
 84eb6dde9e6f3b8a317d16a7049ddac483047964 1908311 mutt_1.5.21-6.4ubuntu2.2_ppc64el_translations.tar.gz
Checksums-Sha256: 
 f2d4df85fbb275304034e29dd9f5f9fdc16db5ff6934db947385210f65cb79ee 836398 mutt_1.5.21-6.4ubuntu2.2_ppc64el.deb
 46c7b059d3217fea00c6b5e05a11cddf26d66a762c7829f97783a8a3f2a1ae73 382920 mutt-patched_1.5.21-6.4ubuntu2.2_ppc64el.deb
 c95c2cce7d29a6c0a6512f1fc4600bfc598a961c3dacbe3c64714d91d96b6e66 1376508 mutt-dbg_1.5.21-6.4ubuntu2.2_ppc64el.deb
 b48a5558d49c9316d29bcca34932f418e1effcf7b0310f8889988c6a0fc264ea 1158 mutt-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb
 d5c6eaae10ed51a796cc8e610fc8603d1366309c3cbc29643be8c0f864edd74d 880 mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb
 f56ba84fe4fd766d1badbc33221ec84085f56ee16e5da7a37f96e4f1e17e39b8 1908311 mutt_1.5.21-6.4ubuntu2.2_ppc64el_translations.tar.gz
Files: 
 a98688a9ef6caa3fb4654646b3b26a94 836398 mail standard mutt_1.5.21-6.4ubuntu2.2_ppc64el.deb
 2223741c79ff84b87aa651e6eaaff772 382920 mail extra mutt-patched_1.5.21-6.4ubuntu2.2_ppc64el.deb
 20cbe745d309d1bc02d570d84bce08d7 1376508 debug extra mutt-dbg_1.5.21-6.4ubuntu2.2_ppc64el.deb
 7b3599554af5b3266f8314e7d120fbf0 1158 mail extra mutt-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb
 afedfe29705080e1f353a84ecb94aead 880 mail extra mutt-patched-dbgsym_1.5.21-6.4ubuntu2.2_ppc64el.ddeb
 6f6d3a50f718d656d23ed36ffb5658aa 1908311 raw-translations - mutt_1.5.21-6.4ubuntu2.2_ppc64el_translations.tar.gz
Original-Maintainer: Antonio Radici <antonio@dyne.org>