A vulnerability in Mutt and NeoMutt could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 2.0.7 | >= 2.0.7 |
| mail-client/neomutt | * | < 20210205-r1 | >= 20210205-r1 |
Mutt is a small but very powerful text-based mail client.
NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt with added features.
It was discovered that Mutt, and NeoMutt did not properly handle certain situations where an IMAP sequence set ends with a comma.
A remote attacker could entice a user to connect to a malicious IMAP server to cause a Denial of Service condition, or other unspecified impacts.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-2.0.7"
All NeoMutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/neomutt-20210205-r1"
A weakness was discovered in Mutt and NeoMutt's TLS handshake handling
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 2.0.2 | >= 2.0.2 |
| mail-client/neomutt | * | < 20201120 | >= 20201120 |
Mutt is a small but very powerful text-based mail client.
NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt with added features.
A weakness in TLS handshake handling was found which may allow information disclosure.
A remote attacker may be able to cause information disclosure.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-2.0.2"
All NeoMutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/neomutt-20201120"
Multiple vulnerabilities have been found in Mutt and Neomutt, the worst of which could result in an access restriction bypass.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/mutt | * | < 1.14.4 | >= 1.14.4 |
| mail-client/neomutt | * | < 20200619 | >= 20200619 |
Mutt is a small but very powerful text-based mail client.
NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt with added features.
Multiple vulnerabilities have been discovered in Mutt and Neomutt. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/mutt-1.14.4"
All Neomutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/neomutt-20200619"
Multiple vulnerabilities have been found in Mutt and NeoMutt, the worst of which allows for arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/neomutt | * | < 20180716 | >= 20180716 |
| net-client/mutt | * | < 1.10.1 | >= 1.10.1 |
Mutt is a small but very powerful text-based mail client.
NeoMutt is a command line mail reader (or MUA). It’s a fork of Mutt with added features.
Multiple vulnerabilities have been discovered in Mutt, and NeoMutt. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted mail message or connect to malicious mail server using Mutt or NeoMutt, possibly resulting in execution of arbitrary code or directory traversal with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All Mutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-client/mutt-1.10.1"
All NeoMuutt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/neomutt-20180716"