-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 19 Jun 2020 06:55:35 +0200 Source: mutt Binary: mutt Architecture: source amd64 Version: 1.7.2-1+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Mutt maintainers <pkg-mutt-maintainers@lists.alioth.debian.org> Changed-By: Antonio Radici <antonio@debian.org> Description: mutt - text-based mailreader supporting MIME, GPG, PGP and threading Changes: mutt (1.7.2-1+deb9u3) stretch-security; urgency=high . * debian/patches: + added security/CVE-not-yet-released.patch to fix a possible MITM response injection attack when using STARTTLS with IMAP, POP3 and SMTP. Checksums-Sha1: af161a4a85aaaf9ffc949870953ab349ee28e19b 2261 mutt_1.7.2-1+deb9u3.dsc e4da42c920392352fdc0d7b5c4ffdbe36a02700f 943720 mutt_1.7.2-1+deb9u3.debian.tar.xz 0e044bc19704c5f1b3597ecb87b36cbcbe48ccdf 1583284 mutt-dbgsym_1.7.2-1+deb9u3_amd64.deb e64239b667d9b355b2f7b5dba00a2961aaf72b3c 8326 mutt_1.7.2-1+deb9u3_amd64.buildinfo 03b9b4fc42e4af1f97a87dfc1ee249f5392b6cb6 1564086 mutt_1.7.2-1+deb9u3_amd64.deb Checksums-Sha256: 47e6d91bfa9285f8b330f20260176d0b22f6f19666117417d8d803fb9cf8c3f0 2261 mutt_1.7.2-1+deb9u3.dsc 2269cfbe2c86619819ac1fe5bd78c79112fec052c8af34e8241d8fd472bfa616 943720 mutt_1.7.2-1+deb9u3.debian.tar.xz 73ec613ddd4e4cb504a41ce4aa1e054e85d764dc814f63817a5d887bf83d64d0 1583284 mutt-dbgsym_1.7.2-1+deb9u3_amd64.deb fb8c773f70e73019a9152981514bf0033d479ad2cba85af2eb28f3f83175d502 8326 mutt_1.7.2-1+deb9u3_amd64.buildinfo f5d4d48e0e897b063d9939e19ec1bb8f63f111453ff317d72e432608e29139c4 1564086 mutt_1.7.2-1+deb9u3_amd64.deb Files: 412643d85ff15ade80b8f2a740ee4ac2 2261 mail optional mutt_1.7.2-1+deb9u3.dsc cdea6615c003b50176f78985db2408a8 943720 mail optional mutt_1.7.2-1+deb9u3.debian.tar.xz a3a67f5c6d6e4b1c12965bdc4eac6466 1583284 debug extra mutt-dbgsym_1.7.2-1+deb9u3_amd64.deb 8857ea5e418b3a416f82d0c870f79df0 8326 mail optional mutt_1.7.2-1+deb9u3_amd64.buildinfo 595ab08cbee739f9c920cd85cfb0ee66 1564086 mail optional mutt_1.7.2-1+deb9u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQJHBAEBCAAxFiEEQObYrBkA1SRrfOa1NcjIiHLLHu0FAl7sWL8THGFudG9uaW9A ZGViaWFuLm9yZwAKCRA1yMiIcsse7WTHEACe3hId9vGTNzFusEO8yXU3IfCi41Jg Zbajj1bK3vEFqCppUwt9ET90Eo8vbASxTT59wl6/LDHOHRC4B916XR3GA5lGW6SE B5YFuRWn6Z7/15iPNf6JsedMuYL+ZFUgpXdwE3+BWmYlsrRPzLD3XYMdpJYwNQVr 8h8eTFhYPy6rUvOkwAk0GNoOP8ECcS3WEf+BjCn677aZvSbNlJDChklwGAgv6k4E B6SJABNH7vgcgMJmLgWO+hbzrh3oEQ+7Y7GdRXBa5qPOskQwsDAiWztxXG3heVv/ SyVnkh34+rohDeOrB5FbKPSKfP+DyXHzxWGgcjPPkGU0pvoFbjyLnTbibDyjW4Ao Eq2KGczt7Mj59BjUB/SJEVMjZUTG9+yprDtIoT4gT+voXoXPntxylaClaxsaibMW YNX2Bq6iLRvpFLFvzO9pL4OP2caY792HY+3bk3MovGa/fC9MzN3OHyJEIRq2vi9a rRAkiCV0rUP96J9uHeuyyz8GCas0az2smRvIylfsho+svWV0z5owCCzinHiog8g7 zw+n+43ky9eLOM0QDkzq6FWg3ZZBQ0WKWfAk7AqB/uuOrXpA0UD0rt/OosvgrONg IjbCSUZBi4lFCQ9PUaD/+RyV96kgFpXIjg5P7YF+sSdMuWF2GJtFMzhIdxYKRdBp JLbAmYnc5lGr0A== =IL4g -----END PGP SIGNATURE-----