Ubuntu 20.04 LTS: USN-4401-1 Critical: Mutt MITM Threats

ubuntu

June 22, 2020

Several security issues were fixed in Mutt.

Summary

Several security issues were fixed in Mutt.

Software Description:

- mutt: text-based mailreader supporting MIME, GPG, PGP and threading

Details:

It was discovered that Mutt incorrectly handled certain requests.

An attacker could possibly use this issue to enable MITM attacks.

(CVE-2020-14093)

It was discovered that Mutt incorrectly handled certain requests.

An attacker could possibly use this issue to proceeds with a connection

even if the user rejects an expired intermediate certificate.

(CVE-2020-14154)

Topics Covered

security advisory update critical Ubuntu mutt MITM penetration

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  mutt                            1.13.2-1ubuntu0.1

Ubuntu 19.10:
  mutt                            1.10.1-2.1ubuntu0.1

Ubuntu 18.04 LTS:
  mutt                            1.9.4-3ubuntu0.2

Ubuntu 16.04 LTS:
  mutt                            1.5.24-1ubuntu0.3

Ubuntu 12.04 ESM:
  mutt                            1.5.21-5ubuntu2.4

After a standard system update you need to restart mutt to make all the necessary changes.