On Tue, Feb 09, 2016 at 02:45:37PM +0100, Víctor M. Jáquez L. wrote:

> > Package: mutt-kz
> > Version: 1.5.23.1-6+b1
> > Severity: wishlist
> > 
> > The -kz version's -v output contains *less* patches than the
> > corresponding mutt-proper binary. Could you please ensure that the
> > list of patches in -v output corresponds with reality?
> > 
> 
> Thanks for reporting this.
> 
> I already fixed it:
> 
> https://gitlab.com/vjaquez-misc/mutt-kz/commit/de32bdc4b7d16b25dae5a41298fcd4cdbafb2132

In this release you also include a patch for CVE-2014-9116:

https://gitlab.com/vjaquez-misc/mutt-kz/commit/19b08ac7f62f5925e832b8fdb396a1a08d824668

Can you clarify the situation with this? Is mutt-kz vulnerable to that
security bug?

Berto

Reply via email to