[Bug 1884588] Re: Certificate problems sending mail
Hi All, I am facing the same issue with 1.9.4-3ubuntu0.2 I tried installing mutt version 1.9.4-3ubuntu0.3, but it gives me message that Version was not found. More detail in the attached snapshot. ** Attachment added: "mutt.png" https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+attachment/5386948/+files/mutt.png -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
** Also affects: mutt (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: mutt (Ubuntu Eoan) Importance: Undecided Status: New ** Also affects: mutt (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: mutt (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: mutt (Ubuntu Precise) Status: New => Fix Released ** Changed in: mutt (Ubuntu Xenial) Status: New => Fix Released ** Changed in: mutt (Ubuntu Bionic) Status: New => Fix Released ** Changed in: mutt (Ubuntu Eoan) Status: New => Fix Released ** Changed in: mutt (Ubuntu Precise) Assignee: (unassigned) => Leonidas S. Barbosa (leosilvab) ** Changed in: mutt (Ubuntu Xenial) Assignee: (unassigned) => Leonidas S. Barbosa (leosilvab) ** Changed in: mutt (Ubuntu Bionic) Assignee: (unassigned) => Leonidas S. Barbosa (leosilvab) ** Changed in: mutt (Ubuntu Eoan) Assignee: (unassigned) => Leonidas S. Barbosa (leosilvab) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
This bug was fixed in the package mutt - 1.10.1-2.1ubuntu0.2 --- mutt (1.10.1-2.1ubuntu0.2) eoan-security; urgency=medium * SECURITY UPDATE: Man-in-the-middle attack - debian/patches/CVE-2020-14954.patch: fix STARTTLS response injection attack clearing the CONNECTION input buffer in mutt_ssl_starttls() in mutt_socket.c, mutt_socket.h, mutt_ssl.c, mutt_ssl_gnutls.c. - CVE-2020-14954 * Redoing patch CVE-2020-14154-1, that causes a possibly regression (LP: #1884588) -- leo.barb...@canonical.com (Leonidas S. Barbosa) Mon, 22 Jun 2020 15:27:39 -0300 ** Changed in: mutt (Ubuntu) Status: In Progress => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-14154 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-14954 ** Changed in: mutt (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
This bug was fixed in the package mutt - 1.9.4-3ubuntu0.3 --- mutt (1.9.4-3ubuntu0.3) bionic-security; urgency=medium * SECURITY UPDATE: Man-in-the-middle attack - debian/patches/CVE-2020-14954.patch: fix STARTTLS response injection attack clearing the CONNECTION input buffer in mutt_ssl_starttls() in mutt_socket.c, mutt_socket.h, mutt_ssl.c, mutt_ssl_gnutls.c. - CVE-2020-14954 * Redoing patch CVE-2020-14154-1, that causes a possibly regression (LP: #1884588) -- leo.barb...@canonical.com (Leonidas S. Barbosa) Mon, 22 Jun 2020 15:33:12 -0300 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
** Changed in: mutt (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
Thank you for the very fast fix! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
Awesome! I think that covers the regression issue so far. I'll issue a new update soon as possibly addressin it in a proper version number. Thanks a lot Rolf!! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
With 1.9.4-3ubuntu0.3~test1 mail can be send without the warnings and error messages. This fixes the bug for me. Do you need any additional testing by my of the packages? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
Yep, I did tested it previously but could not trigger it somehow...anyway There is already a ~test version with the fix, could you try it please? 1.9.4-3ubuntu0.2 to 1.9.4-3ubuntu0.3~test1 ( https://launchpad.net /~ubuntu-security-proposed/+archive/ubuntu/ppa/+packages ) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
You can reproduce the issue by trying to send an email. Of cause I can help to test a new version, when it appears in security- proposed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
I believe I found the issue, as I was already preparing a new update regarding a new vulnerability that just pop up, I'll soon push a new version address this issue too, and would like to know if you can test it, soon as I push it to security-proposed? Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1884588] Re: Certificate problems sending mail
Hi Rolf, Thanks for report this issue, I'm investigating it. Could you please provide any detailed ways in how to reproduce this? Thanks! ** Changed in: mutt (Ubuntu) Assignee: (unassigned) => Leonidas S. Barbosa (leosilvab) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884588 Title: Certificate problems sending mail To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1884588/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
