Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bfe1d5b8 by Salvatore Bonaccorso at 2024-11-15T18:51:39+01:00
Clarify status for CVE-2024-4939{3,4,5}/mutt
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1658,6 +1658,10 @@ CVE-2024-49395 (In mutt and neomutt, PGP encryption does
not use the --hidden-re
- neomutt <unfixed>
[bookworm] - neomutt <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2325332
+ NOTE: https://gitlab.com/muttmua/mutt/-/issues/490
+ NOTE: Mutt project does not plan to address CVE-2024-49393,
CVE-2024-49394, CVE-2024-49395
+ NOTE: cf. https://gitlab.com/muttmua/mutt/-/issues/490#note_2209448655
. Issues with documented
+ NOTE: through http://mutt.org/doc/manual/#crypt-protected-headers-read
NOTE: https://github.com/neomutt/neomutt/issues/4234
CVE-2024-49394 (In mutt and neomutt the In-Reply-To email header field is not
protecte ...)
- mutt <unfixed>
@@ -1665,6 +1669,10 @@ CVE-2024-49394 (In mutt and neomutt the In-Reply-To
email header field is not pr
- neomutt 20241002+dfsg-1
[bookworm] - neomutt <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2325330
+ NOTE: https://gitlab.com/muttmua/mutt/-/issues/490
+ NOTE: Mutt project does not plan to address CVE-2024-49393,
CVE-2024-49394, CVE-2024-49395
+ NOTE: cf. https://gitlab.com/muttmua/mutt/-/issues/490#note_2209448655
. Issues with documented
+ NOTE: through http://mutt.org/doc/manual/#crypt-protected-headers-read
NOTE: https://github.com/neomutt/neomutt/issues/4226
NOTE: Protected since:
https://github.com/neomutt/neomutt/commit/13cfc6f98322eafdc30ecc4c15999d401950a1d9
(20241002)
NOTE: Reading protected value since:
https://github.com/neomutt/neomutt/commit/ec02b141983c70ae7ebee0cdfba59e90a825f0cc
(20241002)
@@ -1674,6 +1682,10 @@ CVE-2024-49393 (In neomutt and mutt, the To and Cc email
headers are not validat
- neomutt 20241002+dfsg-1
[bookworm] - neomutt <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2325317
+ NOTE: https://gitlab.com/muttmua/mutt/-/issues/490
+ NOTE: Mutt project does not plan to address CVE-2024-49393,
CVE-2024-49394, CVE-2024-49395
+ NOTE: cf. https://gitlab.com/muttmua/mutt/-/issues/490#note_2209448655
. Issues with documented
+ NOTE: through http://mutt.org/doc/manual/#crypt-protected-headers-read
NOTE: https://github.com/neomutt/neomutt/issues/4223
NOTE: Protected since:
https://github.com/neomutt/neomutt/commit/913a991a5a8a000c0acc761dd8c9b76eefabfbea
(20241002)
NOTE: Reading protected value since:
https://github.com/neomutt/neomutt/commit/06f8ff5a97ecc4763d52f75b9aedf80578fe1404
(20241002)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bfe1d5b8516ebe913d6b4b10223fa8f9512a95d4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bfe1d5b8516ebe913d6b4b10223fa8f9512a95d4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
