Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 16.04 LTS USN-3719-3 Critical: Mutt Code Execution Threat

ubuntu
Calendar Grey September 28, 2018
Dist Ubuntu Esm H88
A variety of security flaws addressed in Mutt for Ubuntu 16.04 LTS to prevent unauthorized code execution and data leakage.
Several security issues were fixed in Mutt.

Summary

Several security issues were fixed in Mutt.

Software Description:

- mutt: text-based mailreader supporting MIME, GPG, PGP and threading

Details:

USN-3719-1 fixed vulnerabilities in Mutt. Unfortunately, the fixes were

not correctly applied to the packaging for Mutt in Ubuntu 16.04 LTS.

This update corrects the oversight.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Mutt incorrectly handled certain requests.

An attacker could possibly use this to execute arbitrary code.

(CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359,

CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357)

It was discovered that Mutt incorrectly handled certain inputs.

An attacker could possibly use this to access or expose sensitive

information. (CVE-2018-14355, CVE-2018-14356, CVE-2018-14351,

CVE-2018-14362, CVE-2018-14349)

Topics%20covered

Topics Covered

security advisory critical software update code execution Ubuntu information exposure Mutt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  mutt                            1.5.24-1ubuntu0.2
  mutt-patched                    1.5.24-1ubuntu0.2

After a standard system update you need to restart mutt to make all the
necessary changes.

References

https://ubuntu.com/security/notices/USN-3719-3

https://ubuntu.com/security/notices/USN-3719-1

CVE-2018-14349, CVE-2018-14350, CVE-2018-14351, CVE-2018-14352,

CVE-2018-14353, CVE-2018-14354, CVE-2018-14355, CVE-2018-14356,

CVE-2018-14357, CVE-2018-14358, CVE-2018-14359, CVE-2018-14362,

https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1794278

Severity
critical
Lowest
Low
Medium
High
Critical

September 28, 2018

Topics%20covered

Topics Covered

security advisory critical software update code execution Ubuntu information exposure Mutt

Package Information

https://launchpad.net/ubuntu/+source/mutt/1.5.24-1ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.