Synopsis

Moderate: mutt security update

Type/Severity

Security Advisory: Moderate

Topic

An update for mutt is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mutt is a low resource, highly configurable, text-based MIME e-mail client. Mutt supports most e-mail storing formats, such as mbox and Maildir, as well as most protocols, including POP3 and IMAP.

Security Fix(es):

• mutt: IMAP header caching path traversal vulnerability (CVE-2018-14355)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

• BZ - 1602081 - CVE-2018-14355 mutt: IMAP header caching path traversal vulnerability

CVEs

• CVE-2018-14355

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index

Red Hat Enterprise Linux Server 7

SRPM
mutt-1.5.21-29.el7.src.rpm	SHA-256: 38bb4412943b735c1d3a742d91c23aa521cc2fbc01c2c17fafed76d851a2b4ee
x86_64
mutt-1.5.21-29.el7.x86_64.rpm	SHA-256: cde1173415c51012ab8908ff01eb55a215b9b41b756f14b75659143a46c060a2
mutt-debuginfo-1.5.21-29.el7.x86_64.rpm	SHA-256: ce69fe2aaed9d27ac3f9d34d17d12ed55d45e58caa01095f210c8e0daff26154

Red Hat Enterprise Linux Workstation 7

SRPM
mutt-1.5.21-29.el7.src.rpm	SHA-256: 38bb4412943b735c1d3a742d91c23aa521cc2fbc01c2c17fafed76d851a2b4ee
x86_64
mutt-1.5.21-29.el7.x86_64.rpm	SHA-256: cde1173415c51012ab8908ff01eb55a215b9b41b756f14b75659143a46c060a2
mutt-debuginfo-1.5.21-29.el7.x86_64.rpm	SHA-256: ce69fe2aaed9d27ac3f9d34d17d12ed55d45e58caa01095f210c8e0daff26154

Red Hat Enterprise Linux Desktop 7

SRPM
mutt-1.5.21-29.el7.src.rpm	SHA-256: 38bb4412943b735c1d3a742d91c23aa521cc2fbc01c2c17fafed76d851a2b4ee
x86_64
mutt-1.5.21-29.el7.x86_64.rpm	SHA-256: cde1173415c51012ab8908ff01eb55a215b9b41b756f14b75659143a46c060a2
mutt-debuginfo-1.5.21-29.el7.x86_64.rpm	SHA-256: ce69fe2aaed9d27ac3f9d34d17d12ed55d45e58caa01095f210c8e0daff26154

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
mutt-1.5.21-29.el7.src.rpm	SHA-256: 38bb4412943b735c1d3a742d91c23aa521cc2fbc01c2c17fafed76d851a2b4ee
s390x
mutt-1.5.21-29.el7.s390x.rpm	SHA-256: d17345aa6345523ecc25624ed8a5c1ed08796f89d034b85d735dccdbfedebfa9
mutt-debuginfo-1.5.21-29.el7.s390x.rpm	SHA-256: 627e26a8ab5d0f9aa01727adc8cdfdcbdda978317206c62454809b682099a12e

Red Hat Enterprise Linux for Power, big endian 7

SRPM
mutt-1.5.21-29.el7.src.rpm	SHA-256: 38bb4412943b735c1d3a742d91c23aa521cc2fbc01c2c17fafed76d851a2b4ee
ppc64
mutt-1.5.21-29.el7.ppc64.rpm	SHA-256: 569339e9629026861803883f409beda0b3111bc2af0d962a75bd23d8e7a64eef
mutt-debuginfo-1.5.21-29.el7.ppc64.rpm	SHA-256: 18e67145eeef9027f4419ff367223dfa2701c734300b363657ce0550451a1f8c

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
mutt-1.5.21-29.el7.src.rpm	SHA-256: 38bb4412943b735c1d3a742d91c23aa521cc2fbc01c2c17fafed76d851a2b4ee
x86_64
mutt-1.5.21-29.el7.x86_64.rpm	SHA-256: cde1173415c51012ab8908ff01eb55a215b9b41b756f14b75659143a46c060a2
mutt-debuginfo-1.5.21-29.el7.x86_64.rpm	SHA-256: ce69fe2aaed9d27ac3f9d34d17d12ed55d45e58caa01095f210c8e0daff26154

Red Hat Enterprise Linux for Power, little endian 7

SRPM
mutt-1.5.21-29.el7.src.rpm	SHA-256: 38bb4412943b735c1d3a742d91c23aa521cc2fbc01c2c17fafed76d851a2b4ee
ppc64le
mutt-1.5.21-29.el7.ppc64le.rpm	SHA-256: 50851e72c571cf84cda21685fa1d904e8e6c9af66e660bf17e510a634a41c3e6
mutt-debuginfo-1.5.21-29.el7.ppc64le.rpm	SHA-256: 7bee40b8a02243b0776e5985cfa999c7dbe5a4f22e13b6a5fdf8ba29cf772052