l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
November 4: Social gathering
Next Installfest:
TBD
Latest News:
Oct. 24: LUGOD election season has begun!
Page last updated:
2002 Jan 06 22:47

The following is an archive of a post made to our 'vox mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox] upgrade mutt
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox] upgrade mutt



On Sat, Jan 05, 2002 at 10:20:53AM -0800, Ricardo Anguiano wrote:
> I know that some people on this list use mutt.  This is a heads up.

Thanks for passing this along. Debian put out an advisory as well:

> - ------------------------------------------------------------------------
> Debian Security Advisory DSA-096-1                   security@debian.org
> http://www.debian.org/security/                         Wichert Akkerman
> January  2, 2002
> - ------------------------------------------------------------------------
> 
> 
> Package        : mutt
> Problem type   : buffer overflow
> Debian-specific: no
> 
> Joost Pol found a buffer overflow in the address handling code of
> mutt (a popular mail user agent). Even though this is a one byte
> overflow this is exploitable.
> 
> This has been fixed upstream in version 1.2.5.1 and 1.3.25. The
> relevant patch has been added to version 1.2.5-5 of the Debian
> package.

If you have 'deb http://security.debian.org/ stable/updates main' (the
distribution site for security updates) in /etc/apt/sources.list on all your
Debian systems, you may do an 'apt-get update; apt-get install mutt' to fetch
the fixed version. The fix is NOT in Woody or Sid yet, only Potato (stable).

-- 
Henry House
The attached file is a digital signature. See <http://romana.hajhouse.org/pgp>
for information.  My OpenPGP key: <http://romana.hajhouse.org/hajhouse.asc>.

Attachment: pgp00004.pgp
Description: PGP signature



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Appahost Applications
For a significant contribution towards our projector, and a generous donation to allow us to continue meeting at the Davis Library.