Alerts This Week
Warning Icon 1 1,234
Alerts This Week
Warning Icon 1 1,234

openSUSE Leap 16.0 Mutt Moderate Security Advisory 2026-21016-1

opensuse
Calendar Grey June 30, 2026
Dist Opensuse Esm H88
Update available for openSUSE Leap fixing multiple vulnerabilities in mutt. Critical bugs and security issues resolved.
An update that solves 6 vulnerabilities and has 7 bug fixes can now be installed.

Description

This update for mutt fixes the following issues

- CVE-2026-43859: `strfcpy` used instead of `memcpy` for the IMAP `auth_cram` MD5 digest (bsc#1263897).

- CVE-2026-43860: truncation of `hash_passwd` by one byte for IMAP `auth_cram` MD5 digest (bsc#1263896).

- CVE-2026-43861: missing check for `\0` in `url_pct_decode` (bsc#1263895).

- CVE-2026-43862: mishandling of the `imap_auth_gss` security level (bsc#1263894).

- CVE-2026-43863: infinite loop in `data_object_to_stream` in `crypt-gpgme.c` (bsc#1263893).

- CVE-2026-43864: NULL pointer dereference in function `show_sig_summary` (bsc#1263892).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1028=1

Topics%20covered

Topics Covered

security advisory moderate bug fix mutt OpenSUSE IMAP issue

Patch

Package List

- openSUSE Leap 16.0:

mutt-2.2.16-160000.2.1

mutt-doc-2.2.16-160000.2.1

mutt-lang-2.2.16-160000.2.1

References

* bsc#1263892

* bsc#1263893

* bsc#1263894

* bsc#1263895

* bsc#1263896

* bsc#1263897

* bsc#1264047

References:

* https://www.suse.com/security/cve/CVE-2026-43859.html

* https://www.suse.com/security/cve/CVE-2026-43860.html

* https://www.suse.com/security/cve/CVE-2026-43861.html

* https://www.suse.com/security/cve/CVE-2026-43862.html

* https://www.suse.com/security/cve/CVE-2026-43863.html

* https://www.suse.com/security/cve/CVE-2026-43864.html

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21016-1
Rating: moderate
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory moderate bug fix mutt OpenSUSE IMAP issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here