Format: 1.8
Date: Thu, 19 Jul 2018 10:31:16 -0300
Source: mutt
Binary: mutt mutt-patched mutt-dbg
Architecture: armhf armhf_translations
Version: 1.5.24-1ubuntu0.1
Distribution: xenial
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-015.buildd>
Changed-By: Leonidas S. Barbosa <leo.barbosa@canonical.com>
Description:
 mutt       - text-based mailreader supporting MIME, GPG, PGP and threading
 mutt-dbg   - debugging symbols for mutt
 mutt-patched - Mutt Mail User Agent with extra patches
Changes:
 mutt (1.5.24-1ubuntu0.1) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: Mishandles a NO response without a msg
     - debian/patches/ubuntu/mutt-CVE-2018-14349.patch: fix in
       imap/command.c.
     - CVE-2018-14349
   * SECURITY UPDATE: Stack-based buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14350-CVE-2018-14358.patch:
       fix in imap/message.c.
     - CVE-2018-14350
     - CVE-2018-14358
   * SECURITY UPDATE: Mishandles a long IMAP status
     - debian/patches/ubuntu/mutt-CVE-2018-14351.patch: fix in
       imap/command.c.
     - CVE-2018-14351
   * SECURITY UPDATE: Integer underflow and stack-based buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14352-CVE-2018-14353.patch:
       fix in imap/util.c.
     - CVE-2018-14352
     - CVE-2018-14353
   * SECURITY UPDATE: Remote arbitrary code execution
     - debian/patches/ubuntu/mutt-CVE-2018-14354-CVE-2018-14357.patch:
       fix in imap/command.c, imap/imap.c, imap/imap_private.h, imap/util.c.
     - CVE-2018-14354
     - CVE-2018-14357
   * SECURITY UPDATE: Directory traversal
     - debian/patches/ubuntu/mutt-CVE-2018-14355.patch: fix in
       imap/util.c.
     - CVE-2018-14355
   * SECURITY UPDATE: Mishandles a zero-lenght UID
     - debian/patches/ubuntu/mutt-CVE-2018-14356.patch: fix in
       pop.c.
     - CVE-2018-14356
   * SECURITY UPDATE: Buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14359.patch: fix in
       base64.c, imap/auth_cram.c, imap/auth_gss.c, protos.h.
     - CVE-2018-14359
   * SECURITY UPDATE: Unsafe character interactions
     - debian/patches/ubuntu/mutt-CVE-2018-14362.patch: fix in
       pop.c.
     - CVE-2018-14362
Checksums-Sha1:
 1884d12704df371d21452916ac14f38c65be7b7e 2153306 mutt-dbg_1.5.24-1ubuntu0.1_armhf.deb
 b57c51263b793013d7489b5e301f00749f55d2bb 1162 mutt-dbgsym_1.5.24-1ubuntu0.1_armhf.ddeb
 ca222d52d1b41e88eb29b68eae4bf6aa3588e919 948 mutt-patched-dbgsym_1.5.24-1ubuntu0.1_armhf.ddeb
 5a7171811bc0d3710ceb9b0bca2bebbef24af612 651030 mutt-patched_1.5.24-1ubuntu0.1_armhf.deb
 8ccd586b0fd08390a3472d9d9034819cd009ecda 800890 mutt_1.5.24-1ubuntu0.1_armhf.deb
 5f159af78c7e53eb13fc46100c4697cbaefd0b91 1962333 mutt_1.5.24-1ubuntu0.1_armhf_translations.tar.gz
Checksums-Sha256:
 8b679cf4e4c80d9c8472463ffaad6af163100a03c36b38ce0fba217d6cc98684 2153306 mutt-dbg_1.5.24-1ubuntu0.1_armhf.deb
 5835082816d9f00d4af42f2ea98a106cce02787115463f66d2904536ef72d121 1162 mutt-dbgsym_1.5.24-1ubuntu0.1_armhf.ddeb
 1616f15dbb04413aa7b26f774e9c21bb190e0ddbe090a6d9c32f1dad0dc2588e 948 mutt-patched-dbgsym_1.5.24-1ubuntu0.1_armhf.ddeb
 8cb9a074295e71191364219321239f091619c8a9b39247b6ef0d9ff093c09308 651030 mutt-patched_1.5.24-1ubuntu0.1_armhf.deb
 13c99fd22d32db2d0f0696b148b05ffd85af44f3bc58944d6d556804fa84a766 800890 mutt_1.5.24-1ubuntu0.1_armhf.deb
 be7773e52802745c0b53f27b751684136bcb96f190df834327de8d4dda562fbc 1962333 mutt_1.5.24-1ubuntu0.1_armhf_translations.tar.gz
Files:
 ebddff60e868082857505ea9da5897fa 2153306 debug extra mutt-dbg_1.5.24-1ubuntu0.1_armhf.deb
 54fd10a8eee2163ab31f1a6844e7943d 1162 mail extra mutt-dbgsym_1.5.24-1ubuntu0.1_armhf.ddeb
 5cd6ca77fa7e22487659f8d7abba5a1d 948 mail extra mutt-patched-dbgsym_1.5.24-1ubuntu0.1_armhf.ddeb
 a8cc74c6bb60c04c9172ac8a4a73bf46 651030 mail extra mutt-patched_1.5.24-1ubuntu0.1_armhf.deb
 b69a405da7b47a11fbbd8dedadc395ea 800890 mail standard mutt_1.5.24-1ubuntu0.1_armhf.deb
 de9ea2b39bb93cd8df499c538ccf72fb 1962333 raw-translations - mutt_1.5.24-1ubuntu0.1_armhf_translations.tar.gz
Original-Maintainer: Antonio Radici <antonio@dyne.org>