[linux-security] remote vulnerability in mutt

[Martin Siegert <siegert@sfu.ca>]

Topic
=====
buffer overflow vulnerability in mutt may allow execution of arbitrary code

Problem Description
===================
A bug in mutt could allow a remote attacker to send a carefully crafted
mail message that can cause mutt to segfault and possibly execute arbitrary
code as the user running mutt.

Affected Versions
=================
All stable versions prior to 1.4.2
(the unstable versions after 1.3.28 including 1.5.* are not affected)

Solution
========
Upgrade to mutt-1.4.2.1 or patched version for your distribution

Mandrake 9.1
------------
rpm -Fvh mutt-1.4.1i-1.2.91mdk.i586.rpm

Mandrake 9.2
------------
rpm -Fvh mutt-1.4.1i-3.1.92mdk.i586.rpm

RedHat 9
--------
rpm -Fvh mutt-1.4.1-3.3.i386.rpm

Fedora 1.0
----------
rpm -Fvh mutt-1.4.1-5.i386.rpm

SFU 1.0 (RedHat 7.3)
--------------------
(packages can be found at http://www.sfu.ca/acs/security/linux/7.3/
or on sphinx.sfu.ca in /vol/vol0/distrib/sfu/1.0/RPMS)

rpm -Fvh mutt-1.4.1-4.i386.rpm