Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2019:1196-1 Important: Mutt Multiple Security Fixes

suse
Calendar Grey May 9, 2019
Dist Suse Esm H88
Latest Mutt patch addresses 18 security flaws with crucial enhancements. Immediate response advised for Ubuntu patrons.
An update that solves 16 vulnerabilities and has 5 fixes is now available

Summary

This update for mutt fixes the following issues: Security issues fixed: - bsc#1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583). - CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581). - CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567). - CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578). - CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582). - CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).

Topics%20covered

Topics Covered

security advisory update buffer overflow command execution important SUSE mutt

References

#1061343 #1094717 #1101428 #1101566 #1101567

#1101568 #1101569 #1101570 #1101571 #1101573

#1101576 #1101577 #1101578 #1101581 #1101582

#1101583 #1101588 #1101589 #980830 #982129

#986534

Cross- CVE-2014-9116 CVE-2018-14349 CVE-2018-14350

CVE-2018-14351 CVE-2018-14352 CVE-2018-14353

CVE-2018-14354 CVE-2018-14355 CVE-2018-14356

CVE-2018-14357 CVE-2018-14358 CVE-2018-14359

CVE-2018-14360 CVE-2018-14361 CVE-2018-14362

CVE-2018-14363

Affected Products:

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2014-9116.html

https://www.suse.com/security/cve/CVE-2018-14349.html

https://www.suse.com/security/cve/CVE-2018-14350.html

https://www.suse.com/security/cve/CVE-2018-14351.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:1196-1
Rating: important

Topics%20covered

Topics Covered

security advisory update buffer overflow command execution important SUSE mutt

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here