[12023] in bugtraq

home help back first fref pref prev next nref lref last post

[Announce] mutt-1.0pre3 is out / security fix.

daemon@ATHENA.MIT.EDU (Thomas Roessler)
Mon Sep 27 17:46:07 1999

Mail-Followup-To: mutt-announce@mutt.org, BUGTRAQ@securityfocus.com
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
              protocol="application/pgp-signature"; boundary="zYM0uCDKw75PZbzx"
Message-Id:  <19990925093902.A2741@sobolev.rhein.de>
Date:         Sat, 25 Sep 1999 09:39:02 +0200
Reply-To: Thomas Roessler <roessler@GUUG.DE>
From: Thomas Roessler <roessler@GUUG.DE>
X-To:         mutt-announce@mutt.org
To: BUGTRAQ@SECURITYFOCUS.COM

--zYM0uCDKw75PZbzx
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Mutt 1.0pre3 is out.  This is another version from the release
candidate series.  The reason for immediately releasing this version
is a buffer overflow in the text/enriched handler which can be
triggered by means of suitably-formatted e-mail messages.  Thus, we
recommend you upgrade your mutt installations immediately.

If a complete upgrade to the new mutt version is not an option for
you, please apply the patch which can be found under the following
URL:

ftp://ftp.mutt.org/pub/mutt/patch-0.96.6i.tlr.text_enriched.1


Download information
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

You can retrieve the distribution files from the following sites:

     * ftp://ftp.mutt.org/pub/mutt/ (primary site)
     * ftp://ftp.guug.de/pub/mutt/  (same machine, different host name)
     * ftp://riemann.iam.uni-bonn.de/pub/mutt/
     * ftp://ftp.gbnet.net/pub/mutt-international/
     * ftp://ftp.fu-berlin.de/pub/unix/mail/mutt/
     * ftp://ftp.gwdg.de/pub/unix/mail/mutt/international/
     * ftp://ftp.iks-jena.de/pub/mitarb/lutz/crypt/software/pgp/mutt/
     * ftp://uiarchive.cso.uiuc.edu/pub/packages/mail/mutt/
     * ftp://ftp.lip6.fr/pub/unix/mail/mutt/
     * ftp://ftp.42.org/pub/unix/mail/mutt/
     * ftp://gd.tuwien.ac.at/infosys/mail/mutt/
     * ftp://ftp.demon.co.uk/pub/mirrors/mutt/
     * ftp://ftp.ntua.gr/pub/net/mail/mutt/
     * ftp://ftp.cdrom.com/pub/unixfreeware/email/mutt/
     * ftp://ftp.kfki.hu/pub/packages/mail/mutt/
     * ftp://sunsite.uio.no/pub/mail/mutt/
     * ftp://pgp.rasip.fer.hr/pub/mutt/
     * ftp://ftp.arch.pwr.wroc.pl/pub/mutt/
     * ftp://ftp.uib.no/pub/mutt/
     * ftp://ftp.spyda.net/pub/mutt/
     * ftp://ftp.linux.it/pub/mirrors/mutt/
     * ftp://ftp.funet.fi/pub/unix/mail/mutt/

Most of the mirror sites will need some hours to fetch the new
version.    =20


Checksums
=3D=3D=3D=3D=3D=3D=3D=3D=3D

The following checksums have been generated using the md5sum(1)
utility.  Note that, for the tar balls, detached PGP signatures are
available.

26bdd3ac6c70ed9215c7a7ba2deb10a6  diff-1.0pre2-1.0pre3.gz
20fa60e133ae10a2d4796c55968929c0  diff-1.0pre2i-1.0pre3i.gz
9095588285cc4cb5ca630b030e76543a  mutt-1.0pre3.tar.gz
11d65ce99f5eff0a0b4670c2d6b30579  mutt-1.0pre3i.tar.gz



--zYM0uCDKw75PZbzx
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3in

iQEVAwUBN+x8FNImKUTOasbBAQFiXwf/X398HUKAEBpbGUL/NoWe3yGT+7x+dH7z
Mu1x4s0MNoQZ8J4TDpX1YiggJMnEt+/Zl01gga3tsPV///FrIyb9JrqDchIYExRK
D6jE7i0mzrH0qs2lw/odINi873pJ4S4zgTRqHBwspQQ5j1gIoa/tak/V6zpIBgs3
m8KV7Omg5o515TPhnysM4C5LbTJdYG/08Cu16EQofA6RBsbxUNjpfviIbecgdhNb
FmB7CCjZG1xoL3i4XP8fvc/OqBJLnPne7ABR/Y989vvQRCQlNTB74ZD/D1TPwsKw
ywAZj9CIOsKgaPPYteGj4Bg3IZgmwSw2qNEwMPuIlUBtMYzcMrKHZA==
=DxS+
-----END PGP SIGNATURE-----

--zYM0uCDKw75PZbzx--

home help back first fref pref prev next nref lref last post