-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4277-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
August 17, 2018                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : mutt
CVE ID         : CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352
                 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356
                 CVE-2018-14357 CVE-2018-14358 CVE-2018-14359 CVE-2018-14360
                 CVE-2018-14361 CVE-2018-14362 CVE-2018-14363
Debian Bug     : 904051

Several vulnerabilities were discovered in Mutt, a text-based mailreader
supporting MIME, GPG, PGP and threading, potentially leading to code
execution, denial of service or information disclosure when connecting
to a malicious mail/NNTP server.

For the stable distribution (stretch), these problems have been fixed in
version 1.7.2-1+deb9u1.

We recommend that you upgrade your mutt packages.

For the detailed security status of mutt please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/mutt

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=IHBe
-----END PGP SIGNATURE-----