Fedora Core 6 Update: mutt-1.4.2.3-1.fc6
Summary
Mutt is a text-mode mail user agent. Mutt supports color, threading,
arbitrary key remapping, and a lot of customization.
You should install mutt if you have used it in the past and you prefer
it, or if you are new to mail programs and have not decided which one
you are going to use.
This update fixes two security issues:
The APOP protocol allows remote attackers to guess the first
3 characters of a password via man-in-the-middle (MITM)
attacks that use crafted message IDs and MD5 collisions.
(CVE-2007-1558)
Buffer overflow in Mutt 1.4.2 might allow local users to
execute arbitrary code via "&" characters in the GECOS
field, which triggers the overflow during alias expansion.
(CVE-2007-2683)
- update to 1.4.2.3 (CVE-2007-2683, CVE-2007-1558)
95da57dc6d80ba28f234be812fdb04f23422d7e0 SRPMS/mutt-1.4.2.3-1.fc6.src.rpm
95da57dc6d80ba28f234be812fdb04f23422d7e0 noarch/mutt-1.4.2.3-1.fc6.src.rpm
1a88871576ce0a8d9d2c20173232eaf068089171 ppc/debug/mutt-debuginfo-1.4.2.3-1.fc6.ppc.rpm
4f2ff83e7734b6e8b562377af69cd28e8097a9a5 ppc/mutt-1.4.2.3-1.fc6.ppc.rpm
1c6db27e945e767cdca7b2b8cf16b19ffad97751 x86_64/debug/mutt-debuginfo-1.4.2.3-1.fc6.x86_64.rpm
fd4c35d9244dbbb6ecadee874f231e3a6eb22ba5 x86_64/mutt-1.4.2.3-1.fc6.x86_64.rpm
e071da29cd7d4cc14a8ecbeec6a93ec985da65de i386/debug/mutt-debuginfo-1.4.2.3-1.fc6.i386.rpm
2911156283af56769a72e478297dd2919074a6ae i386/mutt-1.4.2.3-1.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at .
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce
FEDORA-2007-539 2007-05-30 Name : mutt Version : 1.4.2.3 Release : 1.fc6 Summary : A text mode mail user agent. Description : Mutt is a text-mode mail user agent. Mutt supports color, threading, arbitrary key remapping, and a lot of customization. You should install mutt if you have used it in the past and you prefer it, or if you are new to mail programs and have not decided which one you are going to use. This update fixes two security issues: The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. (CVE-2007-1558) Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion. (CVE-2007-2683) - update to 1.4.2.3 (CVE-2007-2683, CVE-2007-1558) 95da57dc6d80ba28f234be812fdb04f23422d7e0 SRPMS/mutt-1.4.2.3-1.fc6.src.rpm 95da57dc6d80ba28f234be812fdb04f23422d7e0 noarch/mutt-1.4.2.3-1.fc6.src.rpm 1a88871576ce0a8d9d2c20173232eaf068089171 ppc/debug/mutt-debuginfo-1.4.2.3-1.fc6.ppc.rpm 4f2ff83e7734b6e8b562377af69cd28e8097a9a5 ppc/mutt-1.4.2.3-1.fc6.ppc.rpm 1c6db27e945e767cdca7b2b8cf16b19ffad97751 x86_64/debug/mutt-debuginfo-1.4.2.3-1.fc6.x86_64.rpm fd4c35d9244dbbb6ecadee874f231e3a6eb22ba5 x86_64/mutt-1.4.2.3-1.fc6.x86_64.rpm e071da29cd7d4cc14a8ecbeec6a93ec985da65de i386/debug/mutt-debuginfo-1.4.2.3-1.fc6.i386.rpm 2911156283af56769a72e478297dd2919074a6ae i386/mutt-1.4.2.3-1.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce
Change Log
References