l i n u x - u s e r s - g r o u p - o f - d a v i s
Next Meeting:
July 7: Social gathering
Next Installfest:
Latest News:
Jun. 14: June LUGOD meeting cancelled
Page last updated:
2002 Jan 05 14:14

The following is an archive of a post made to our 'vox mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox] upgrade mutt
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox] upgrade mutt

begin Henry House <hajhouse@houseag.com> 
> On Sat, Jan 05, 2002 at 10:20:53AM -0800, Ricardo Anguiano wrote:
> > I know that some people on this list use mutt.  This is a heads up.
> Thanks for passing this along. Debian put out an advisory as well:
> > - ------------------------------------------------------------------------
> > Debian Security Advisory DSA-096-1                   security@debian.org
> > http://www.debian.org/security/                         Wichert Akkerman
> > January  2, 2002
> > - ------------------------------------------------------------------------
> > 
> > 
> > Package        : mutt
> > Problem type   : buffer overflow
> > Debian-specific: no
> > 
> > Joost Pol found a buffer overflow in the address handling code of
> > mutt (a popular mail user agent). Even though this is a one byte
> > overflow this is exploitable.
> > 
> > This has been fixed upstream in version and 1.3.25. The
> > relevant patch has been added to version 1.2.5-5 of the Debian
> > package.
> If you have 'deb http://security.debian.org/ stable/updates main' (the
> distribution site for security updates) in /etc/apt/sources.list on all your
> Debian systems, you may do an 'apt-get update; apt-get install mutt' to fetch
> the fixed version. The fix is NOT in Woody or Sid yet, only Potato (stable).

how is this?  i thought sid was the first to see packages, woody next
and potato is frozen until an official dist release?


PGP Fingerprint: B9F1 6CF3 47C4 7CD8 D33E  70A9 A3B9 1945 67EA 951D
PGP Public Key:  finger p@dirac.org
vox mailing list

LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
EDGE Tech Corp.
For donating some give-aways for our meetings.