Red Hat Security Advisory: mutt security, bug fix, and enhancement update

Fixed packages 3

Vulnerabilities 2

• Unscored —
  CVE-2020-28896

  Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's in…

  mutt mutt neomutt neomutt Debian Ubuntu Alpine
  Nov 23, 2020
• Unscored —
  CVE-2021-3181

  rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending…

  mutt mutt mutt Debian Ubuntu Alpine
  Jan 19, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890084
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1900826
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1912614
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1920446
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4181.json
• report
  https://access.redhat.com/security/cve/CVE-2020-28896
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28896
• report
  https://access.redhat.com/security/cve/CVE-2021-3181
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3181
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3181