[Buildroot] [PATCH 1/1] package/mutt: security bump to version 2.0.7

Peter Korsgaard peter at korsgaard.com
Mon Jun 7 21:34:19 UTC 2021


>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:

 > Fix CVE-2021-32055: Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt
 > 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which
 > imap/util.c has an out-of-bounds read in situations where an IMAP
 > sequence set ends with a comma. NOTE: the $imap_qresync setting for
 > QRESYNC is not enabled by default.

 > https://gitlab.com/muttmua/mutt/-/blob/mutt-2-0-7-rel/ChangeLog

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>

For 2021.02.x I have instead backported the upstream patch to fix the
issue for our 1.14.7 version.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list