Format: 1.8
Date: Thu, 19 Jul 2018 13:32:26 -0300
Source: mutt
Binary: mutt
Architecture: armhf armhf_translations
Version: 1.9.4-3ubuntu0.1
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-038.buildd>
Changed-By: Leonidas S. Barbosa <leo.barbosa@canonical.com>
Description:
 mutt       - text-based mailreader supporting MIME, GPG, PGP and threading
Changes:
 mutt (1.9.4-3ubuntu0.1) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: Mishandles a NO response without a msg
     - debian/patches/ubuntu/mutt-CVE-2018-14349.patch: fix in
       imap/command.c.
     - CVE-2018-14349
   * SECURITY UPDATE: Stack-based buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14350-CVE-2018-14358.patch:
       fix in imap/message.c.
     - CVE-2018-14350
     - CVE-2018-14358
   * SECURITY UPDATE: Mishandles a long IMAP status
     - debian/patches/ubuntu/mutt-CVE-2018-14351.patch: fix in
       imap/command.c.
     - CVE-2018-14351
   * SECURITY UPDATE: Integer underflow and stack-based buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14352-CVE-2018-14353.patch:
       fix in imap/util.c.
     - CVE-2018-14352
     - CVE-2018-14353
   * SECURITY UPDATE: Remote arbitrary code execution
     - debian/patches/ubuntu/mutt-CVE-2018-14354-CVE-2018-14357.patch:
       fix in imap/command.c, imap/imap.c, imap/imap_private.h, imap/util.c.
     - CVE-2018-14354
     - CVE-2018-14357
   * SECURITY UPDATE: Directory traversal
     - debian/patches/ubuntu/mutt-CVE-2018-14355.patch: fix in
       imap/util.c.
     - CVE-2018-14355
   * SECURITY UPDATE: Mishandles a zero-lenght UID
     - debian/patches/ubuntu/mutt-CVE-2018-14356.patch: fix in
       pop.c.
     - CVE-2018-14356
   * SECURITY UPDATE: Buffer overflow
     - debian/patches/ubuntu/mutt-CVE-2018-14359.patch: fix in
       base64.c, imap/auth_cram.c, imap/auth_gss.c, protos.h.
     - CVE-2018-14359
   * SECURITY UPDATE: Unsafe character interactions
     - debian/patches/ubuntu/mutt-CVE-2018-14362.patch: fix in
       pop.c.
     - CVE-2018-14362
Checksums-Sha1:
 3fc40f456bc097475f74313c93526e76a8603d0f 1397776 mutt-dbgsym_1.9.4-3ubuntu0.1_armhf.ddeb
 ed3d40a65bb2e4088ab8186480de9cb76c923cb2 8054 mutt_1.9.4-3ubuntu0.1_armhf.buildinfo
 15c245b5e7840503c67136faa84331f0afdc56a9 814300 mutt_1.9.4-3ubuntu0.1_armhf.deb
 ba5e2c83975a8f7699756189b363aa87cb8cd231 2056985 mutt_1.9.4-3ubuntu0.1_armhf_translations.tar.gz
Checksums-Sha256:
 327bc8a015b7d30465bc90c6900bfbfd7f4a69ef3ec2b8548abc3a67414236ea 1397776 mutt-dbgsym_1.9.4-3ubuntu0.1_armhf.ddeb
 0a210d6193cf8019b4d357628205e52fe20f1fc6192ce94becc973b3d839cfd5 8054 mutt_1.9.4-3ubuntu0.1_armhf.buildinfo
 c211a4d7c23b7ca8b259e2055db5f1f05a522e025b1cd73ec594e92489fec1d4 814300 mutt_1.9.4-3ubuntu0.1_armhf.deb
 07cb98df92c1cfd432264982c9e6ee5f23d5645878a16f9d675e0d789767ba72 2056985 mutt_1.9.4-3ubuntu0.1_armhf_translations.tar.gz
Files:
 3f08e975cad39147f289dfcba5657115 1397776 debug optional mutt-dbgsym_1.9.4-3ubuntu0.1_armhf.ddeb
 2dfd0d5431b4e94d5e2289c3cf0e03a7 8054 mail optional mutt_1.9.4-3ubuntu0.1_armhf.buildinfo
 93e8be738fb94ef3d152c807d6fde842 814300 mail optional mutt_1.9.4-3ubuntu0.1_armhf.deb
 01281399e825406e02ef398602ee7180 2056985 raw-translations - mutt_1.9.4-3ubuntu0.1_armhf_translations.tar.gz
Original-Maintainer: Mutt maintainers <mutt@packages.debian.org>