[ubuntu/xenial-security] mutt 1.5.24-1ubuntu0.6 (Accepted)

Leonidas S. Barbosa leo.barbosa at canonical.com
Mon Jan 25 15:22:15 UTC 2021


mutt (1.5.24-1ubuntu0.6) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2021-3181-1.patch: Fix memory leak parsing group addresses without a display name
      in rfc822.c.
    - debian/patches/CVE-2021-3181-2.patch: Don't allocate a group terminator unless we are in a group-list
      in rfc822.c.
    - debian/patches/CVE-2021-3181-3.patch: Add group terminator if it is left
      off in rfc822.c.
    - CVE-2021-3181

Date: 2021-01-22 13:41:36.821448+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/mutt/1.5.24-1ubuntu0.6
-------------- next part --------------
Sorry, changesfile not available.


More information about the Xenial-changes mailing list