Описание
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| neomutt | fixed | 20180716+dfsg.1-1 | package | |
| mutt | fixed | 1.9.1-1 | package |
Примечания
https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e
src:mutt 1.9.1-1 switches to official mutt.org source code without neomutt patchset
previous versions ship a neomutt patchset.
Связанные уязвимости
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
Уязвимость компонента newsrc.c почтового клиента NeoMutt, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
