Unscored USN-4645-1 1 CVE

mutt vulnerability

Published Nov 25, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Mutt incorrectly handled certain connections.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	mutt	1.5.24-1ubuntu0.5
Ubuntu · 18.04 LTS 18.04:LTS	mutt	1.9.4-3ubuntu0.4
Ubuntu · 20.04 LTS 20.04:LTS	mutt	1.13.2-1ubuntu0.3

Vulnerabilities 1

Unscored —

CVE-2020-28896

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's in…

mutt mutt neomutt neomutt Debian Ubuntu Alpine

Nov 23, 2020

References

report
https://ubuntu.com/security/CVE-2020-28896