Summary
It was discovered that Mutt incorrectly handled certain requests.
An attacker could possibly use this issue to enable MITM attacks.
(CVE-2020-14954)
This update also address a regression caused in the last update USN-4401-1.
It only affected Ubuntu 12.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 19.10.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | mutt | 1.5.24-1ubuntu0.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | mutt | 1.9.4-3ubuntu0.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | mutt | 1.13.2-1ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. Whe…