-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 10 Sep 2023 13:53:23 +0200 Source: mutt Architecture: source Version: 2.0.5-4.1+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: Mutt maintainers <mutt@packages.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1051563 Changes: mutt (2.0.5-4.1+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix rfc2047 base64 decoding to abort on illegal characters. (CVE-2023-4874, CVE-2023-4875) (Closes: #1051563) * Check for NULL userhdrs. (CVE-2023-4875) (Closes: #1051563) * Fix write_one_header() illegal header check. (CVE-2023-4874) (Closes: #1051563) Checksums-Sha1: 241bdd85de80c5f0bd977f580500505d7ab250ab 2476 mutt_2.0.5-4.1+deb11u3.dsc 5254653d11f03e59d6a733f696076f4cebfa7324 5294710 mutt_2.0.5.orig.tar.gz 0ea5fe0ef496229bea4f2f71cf23fee8372ca4c0 833 mutt_2.0.5.orig.tar.gz.asc f5de9eb973394d041dc87f7548c58cedd1b66c28 109300 mutt_2.0.5-4.1+deb11u3.debian.tar.xz Checksums-Sha256: 778f98df98ce8369b3d6993de836f622bf86ffe2ac1bac30918e72026a97b0e7 2476 mutt_2.0.5-4.1+deb11u3.dsc e21d5aec0d3110f89d390929e56a38794a94f5843120d9ff59b21da78fd0004d 5294710 mutt_2.0.5.orig.tar.gz 9deff041e96664c2871e04eff30c0c77ac35d8a35a515c749bcbf205656c622c 833 mutt_2.0.5.orig.tar.gz.asc 622db451e11dfc415f7846180da19a77ff9c5f70e12cb95fe2019547cfba8a2c 109300 mutt_2.0.5-4.1+deb11u3.debian.tar.xz Files: 5ac3eb203c8ce68de7a457a5f459e0d6 2476 mail optional mutt_2.0.5-4.1+deb11u3.dsc f738a7d1d458d91420fe0759845e4d0a 5294710 mail optional mutt_2.0.5.orig.tar.gz ca23b5285b3b22b1b9ce6541bcec6162 833 mail optional mutt_2.0.5.orig.tar.gz.asc a8c8eb16f095bf30ba9bc560f148853a 109300 mail optional mutt_2.0.5-4.1+deb11u3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmT9rvNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E5BwP/1Q4QvzdIvGfjalJKgQbQG0/bgC7P62s ZNKwczlHjLbpQHj+aPXBuB4yKrr6RpEZUeHt6SKZtU07A4P0KrbYpiFx3UjfJjPW wGc4jYqd/YWPPrOcfpFLJXOOkPtbkyB13tl2DNy3M0/9MWc5WOObD0sH2/amtP+X g5g6xmgeIa3TmICiFHeokucWtNSH6wr4a4ebgjqSUI6o747rBuNJc0/FNqVkMbut JPposy9QYal6H5yAlUClMV4cYsHmZVLd8Dc3xSP43FOEtJzROViq1XlZqtcAIm1a 3QwWaxKq7U1k/fgIA+bsBFp35eFJgvY7a1jXjDuAsczk37rbphtPhOgwYlF3dmzr dNK8dLLv7QMBezYpGN7AGhInB2KKLLFa+1mHGCVWEeTh5S9gwmqs9wEQ1NSp/wk9 /du4qAW4erXsuCJshVVU1QkgwJqAlahclNybEDWPvcvAp58VlTYqWa94G8h7PGSh QxTXP4Xw/EyH9QCS0Jm6whbFmjaQCSBGQviSgUEFX9KUOaJYuPRNn8L9YyYxET/j D4EMR5YfsNRScVnU+A1XGRJt+yM9qUkssPIvPR7hVRR8ytfQ12+25qFQCCEeMgBe 4bbZnUHI0tKzbYlar2lHjKZUUMNTfzGbRKdYzI5dPZojIthK8ByzrBhTyhhOPfMU Ulio9NCMNjms =Isbv -----END PGP SIGNATURE-----