ALT-BU-2018-3446-1
Branch sisyphus update bulletin.
Package mate-applets updated to version 1.20.2-alt1 for branch sisyphus in task 212553.
Closed bugs
Апплет некорректно добавляется
Package python-module-docutils updated to version 0.14-alt2 for branch sisyphus in task 212433.
Closed bugs
Утилита rst2man упакована с расширением .py
Closed vulnerabilities
Modified: 2024-11-21
CVE-2017-6840
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file.
Modified: 2024-11-21
CVE-2017-6841
The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Modified: 2024-11-21
CVE-2017-6842
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Modified: 2024-11-21
CVE-2017-6848
The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Modified: 2024-11-21
CVE-2017-7378
The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-7379
The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-7380
The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-7381
The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-7382
The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-7383
The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-7994
The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-8053
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
Modified: 2024-11-21
CVE-2017-8054
The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2017-8378
Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size.
Modified: 2024-11-21
CVE-2017-8787
The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file.
Modified: 2024-11-21
CVE-2018-11254
An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054.
Modified: 2024-11-21
CVE-2018-11255
An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2018-11256
An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Modified: 2024-11-21
CVE-2018-5295
In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.
Modified: 2024-11-21
CVE-2018-5296
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.
Modified: 2024-11-21
CVE-2018-5308
PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Modified: 2024-11-21
CVE-2018-5309
In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.
Modified: 2024-11-21
CVE-2018-5783
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
Modified: 2024-11-21
CVE-2018-6352
In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file.
Modified: 2024-11-21
CVE-2018-8000
In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted pdf file.
Modified: 2024-11-21
CVE-2018-8001
In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Modified: 2024-11-21
CVE-2018-8002
In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Closed vulnerabilities
BDU:2019-00511
Уязвимость в коде «pop.c» почтовых клиентов Mutt и NeoMutt, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2019-01626
Уязвимость почтовых клиентов Mutt и NeoMutt, связанная с выходом операции за границы буфера данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-04312
Уязвимость компонента imap/util.c почтовых клиентов Mutt и NeoMutt, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2019-04313
Уязвимость компонента newsrc.c почтового клиента NeoMutt, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
BDU:2019-04570
Уязвимость почтовых клиентов Mutt и NeoMutt, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код
BDU:2019-04571
Уязвимость файла imap/command.c почтовых клиентов Mutt и NeoMutt, связанная с ошибками при обработке размера литерала состояния IMAP, позволяющая нарушителю выполнить произвольный код
BDU:2019-04572
Уязвимость функции imap_quote_string файла imap/util.c почтовых клиентов Mutt и NeoMutt, связанная с переполнением буфера в стеке, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-04573
Уязвимость функции imap_quote_string файла imap/util.c почтовых клиентов Mutt и NeoMutt, связанная с целочисленной потерей значимости, позволяющая нарушителю выполнить произвольный код
BDU:2019-04574
Уязвимость почтовых клиентов Mutt и NeoMutt, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнить произвольные команды
BDU:2019-04575
Уязвимость почтовых клиентов Mutt и NeoMutt, связанная с использованием неинициализированного указателя, позволяющая нарушителю выполнить произвольный код
BDU:2019-04576
Уязвимость почтовых клиентов Mutt и NeoMutt, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнить произвольные команды
BDU:2019-04577
Уязвимость файла imap/message.c почтовых клиентов Mutt и NeoMutt, связанная с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код
BDU:2019-04578
Уязвимость почтовых клиентов Mutt и NeoMutt, связанная с переполнением буфера, позволяющая нарушителю выполнить произвольный код
BDU:2019-04579
Уязвимость функции sscanf в файле newsrc.c почтового клиента NeoMutt, связанная с ошибками при обработке объектов в памяти, позволяющая нарушителю выполнить произвольный код
BDU:2019-04580
Уязвимость файла nntp.c почтового клиента NeoMutt, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код
Modified: 2024-11-21
CVE-2018-14349
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1
- https://github.com/neomutt/neomutt/commit/36a29280448097f34ce9c94606195f2ac643fed1
- https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416
- https://gitlab.com/muttmua/mutt/commit/9347b5c01dc52682cb6be11539d9b7ebceae4416
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14350
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long INTERNALDATE field.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- 104931
- 104931
- https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485
- https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485
- https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870
- https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-1
- USN-3719-1
- USN-3719-2
- USN-3719-2
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14351
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/3c49c44be9b459d9c616bcaef6eb5d51298c1741
- https://github.com/neomutt/neomutt/commit/3c49c44be9b459d9c616bcaef6eb5d51298c1741
- https://gitlab.com/muttmua/mutt/commit/e57a8602b45f58edf7b3ffb61bb17525d75dfcb1
- https://gitlab.com/muttmua/mutt/commit/e57a8602b45f58edf7b3ffb61bb17525d75dfcb1
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14352
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4
- https://github.com/neomutt/neomutt/commit/e27b65b3bf8defa34db58919496056caf3850cd4
- https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d
- https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-1
- USN-3719-1
- USN-3719-2
- USN-3719-2
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14353
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23
- https://github.com/neomutt/neomutt/commit/65d64a5b60a4a3883f2cd799d92c6091d8854f23
- https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d
- https://gitlab.com/muttmua/mutt/commit/e0131852c6059107939893016c8ff56b6e42865d
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-1
- USN-3719-1
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14354
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- 104925
- 104925
- RHSA-2018:2526
- RHSA-2018:2526
- https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb
- https://github.com/neomutt/neomutt/commit/95e80bf9ff10f68cb6443f760b85df4117cb15eb
- https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d
- https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-1
- USN-3719-1
- USN-3719-2
- USN-3719-2
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14355
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d
- https://github.com/neomutt/neomutt/commit/57971dba06346b2d7179294f4528b8d4427a7c5d
- https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d
- https://gitlab.com/muttmua/mutt/commit/31eef6c766f47df8281942d19f76e35f475c781d
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14356
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82
- https://github.com/neomutt/neomutt/commit/93b8ac558752d09e1c56d4f1bc82631316fa9c82
- https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6
- https://gitlab.com/muttmua/mutt/commit/e154cba1b3fc52bb8cb8aa846353c0db79b5d9c6
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14357
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- RHSA-2018:2526
- RHSA-2018:2526
- https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725
- https://github.com/neomutt/neomutt/commit/e52393740334443ae0206cab2d7caef381646725
- https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d
- https://gitlab.com/muttmua/mutt/commit/185152818541f5cdc059cbff3f3e8b654fc27c1d
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-1
- USN-3719-1
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14358
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485
- https://github.com/neomutt/neomutt/commit/1b0f0d0988e6df4e32e9f4bf8780846ea95d4485
- https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870
- https://gitlab.com/muttmua/mutt/commit/3287534daa3beac68e2e83ca4b4fe8a3148ff870
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-1
- USN-3719-1
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14359
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85
- https://github.com/neomutt/neomutt/commit/6f163e07ae68654d7ac5268cbb7565f6df79ad85
- https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a
- https://gitlab.com/muttmua/mutt/commit/3d9028fec8f4d08db2251096307c0bbbebce669a
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-1
- USN-3719-1
- USN-3719-2
- USN-3719-2
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14360
An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.
- https://github.com/neomutt/neomutt/commit/6296f7153f0c9d5e5cd3aaf08f9731e56621bdd3
- https://github.com/neomutt/neomutt/commit/6296f7153f0c9d5e5cd3aaf08f9731e56621bdd3
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14361
An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.
- https://github.com/neomutt/neomutt/commit/9e927affe3a021175f354af5fa01d22657c20585
- https://github.com/neomutt/neomutt/commit/9e927affe3a021175f354af5fa01d22657c20585
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14362
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
- http://www.mutt.org/news.html
- http://www.mutt.org/news.html
- RHSA-2018:2526
- RHSA-2018:2526
- https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e
- https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e
- https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576
- https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- GLSA-201810-07
- GLSA-201810-07
- USN-3719-3
- USN-3719-3
- DSA-4277
- DSA-4277
Modified: 2024-11-21
CVE-2018-14363
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
- https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e
- https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- [debian-lts-announce] 20180802 [SECURITY] [DLA 1455-1] mutt security update
- https://neomutt.org/2018/07/16/release
- https://neomutt.org/2018/07/16/release
- DSA-4277
- DSA-4277
Package xfce4-appfinder updated to version 4.13.1-alt2 for branch sisyphus in task 212582.
Closed bugs
SegFault в xfce4-appfinder (was: Окошко по Alt-F2 почти сразу закрывается)