[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#32373] neomutt 20180716 security update (fixes CVE-2018-14349 - CVE
From: |
Nils Gillmann |
Subject: |
[bug#32373] neomutt 20180716 security update (fixes CVE-2018-14349 - CVE-2018-14363) |
Date: |
Mon, 6 Aug 2018 09:29:10 +0000 |
Hi,
sorry for being late on this important update, life kept me busy.
From the release notes:
> Notes
> This is a small, but intensive, bug-fix release.
> It fixes some important security holes, so upgrading is strongly recommended.
> Some large architectural changes are coming, so the next release may be some
> months away.
>
> Security
> CVE-2018-14349 - NO Response Heap Overflow
> CVE-2018-14350 - INTERNALDATE Stack Overflow
> CVE-2018-14351 - STATUS Literal Length relative write
> CVE-2018-14352 - imap_quote_string off-by-one stack overflow
> CVE-2018-14353 - imap_quote_string int underflow
> CVE-2018-14354 - imap_subscribe Remote Code Execution
> CVE-2018-14355 - STATUS mailbox header cache directory traversal
> CVE-2018-14356 - POP empty UID NULL deref
> CVE-2018-14357 - LSUB Remote Code Execution
> CVE-2018-14358 - RFC822.SIZE Stack Overflow
> CVE-2018-14359 - base64 decode Stack Overflow
> CVE-2018-14360 - NNTP Group Stack Overflow
> CVE-2018-14361 - NNTP Write 1 where via GROUP response
> CVE-2018-14362 - POP Message Cache Directory Traversal
> CVE-2018-14363 - NNTP Header Cache Directory Traversal
0001-gnu-neomutt-Update-to-20180716-fixes-CVE-2018-14349-.patch
Description: Text document
- [bug#32373] neomutt 20180716 security update (fixes CVE-2018-14349 - CVE-2018-14363),
Nils Gillmann <=