-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Fedora Test Update Notification FEDORA-2004-1285 Bugzilla https://bugzilla.fedora.us/show_bug.cgi?id=1285 2004-02-24 - --------------------------------------------------------------------- Name : mutt Version 8.0 : 1.4.1-0.8.x.1.legacy Release : 0.8.x.1.legacy Summary : A text mode mail user agent. Description : Mutt is a text-mode mail user agent. Mutt supports color, threading, arbitrary key remapping, and a lot of customization. You should install mutt if you have used it in the past and you prefer it, or if you are new to mail programs and have not decided which one you are going to use. - --------------------------------------------------------------------- Update Information: CAN-2004-0078: Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages. - --------------------------------------------------------------------- Changelog: * Wed Feb 11 2004 Todd Zullinger <Freedom_Lover@xxxxxxxxx> 5:1.4.1-0.8.x.1.legacy - - patch to fix CAN-2004-0078 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0078 - - s/Serial/Epoch/ - - s/BuildPrereq/BuildRequires/ - - add BuildRequires: cyrus-sasl-devel - --------------------------------------------------------------------- This update can be downloaded from: http://download.fedoralegacy.org/redhat/ b7e95c02951c5b412d3c08abd90fbd03db89e1dd 8.0/updates-testing/SRPMS/mutt-1.4.1-0.8.x.1.legacy.src.rpm 3d2b3c5631252abc13959f87a164bf3f96459997 8.0/updates-testing/i386/mutt-1.4.1-0.8.x.1.legacy.i386.rpm Please note that this update is also available via yum and apt through the updates-testing channel. Many people find this an easier way to apply updates. - --------------------------------------------------------------------- - -- Jesse Keating RHCE (http://geek.j2solutions.net) Fedora Legacy Team (http://www.fedoralegacy.org) Mondo DevTeam (www.mondorescue.org) GPG Public Key (http://geek.j2solutions.net/jkeating.j2solutions.pub) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQFAPD9L4v2HLvE71NURAl5hAKCs7x7C85ZOcwuM3dTY22zSGe4/kgCgtcpW kvk9vbH0pP7ODQBZtPvtdtc= =HM8V -----END PGP SIGNATURE-----