Author: ken
Date: Mon Jun 15 14:04:54 2020
New Revision: 1580
Log:
Add errata for mutt-1.14.3.
Modified:
html/trunk/blfs/errata/9.1-systemd/index.html
html/trunk/blfs/errata/9.1/index.html
Modified: html/trunk/blfs/errata/9.1-systemd/index.html
==============================================================================
--- html/trunk/blfs/errata/9.1-systemd/index.html Sat Jun 13 19:57:35
2020 (r1579)
+++ html/trunk/blfs/errata/9.1-systemd/index.html Mon Jun 15 14:04:54
2020 (r1580)
@@ -246,6 +246,11 @@
of libexif shipped with BLFS 9.1. To fix these security
vulnerabilities,
update to libexif-0.6.22 or higher using the instructions in
<a
href="../../view/systemd/general/libexif.html">libexif-0.6.22</a>.</li>
+ <li>In versions of Mutt before 1.14.3, an IMAP man-in-the-middle attack
+ is possible, also GnuTLS was not verifying expiration dates of all
+ certificates in a chain. To fix these vulnerabilities, update to
+ mutt-1.14.3 or higher using the instructions at
+ <a href="../../view/systemd/basicnet/mutt.html">mutt-1.14.3</a>.</li>
</ul>
Modified: html/trunk/blfs/errata/9.1/index.html
==============================================================================
--- html/trunk/blfs/errata/9.1/index.html Sat Jun 13 19:57:35 2020
(r1579)
+++ html/trunk/blfs/errata/9.1/index.html Mon Jun 15 14:04:54 2020
(r1580)
@@ -244,6 +244,11 @@
of libexif shipped with BLFS 9.1. To fix these security
vulnerabilities,
update to libexif-0.6.22 or higher using the instructions in
<a
href="../../view/svn/general/libexif.html">libexif-0.6.22</a>.</li>
+ <li>In versions of Mutt before 1.14.3, an IMAP man-in-the-middle attack
+ is possible, also GnuTLS was not verifying expiration dates of all
+ certificates in a chain. To fix these vulnerabilities, update to
+ mutt-1.14.3 or higher using the instructions at
+ <a href="../../view/svn/basicnet/mutt.html">mutt-1.14.3</a>.</li>
</ul>
<!--#include virtual="/common/footer.html" -->
--
http://lists.linuxfromscratch.org/listinfo/website
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
