Fedora je izdala nadogradnju paketa Mutt koja ispravlja sigurnosni propust koji je moguće iskoristiti za izvođenje MITM napada.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7756
2011-06-02 10:19:58
--------------------------------------------------------------------------------

Name        : mutt
Product     : Fedora 13
Version     : 1.5.21
Release     : 5.fc13
URL         : http://www.mutt.org/
Summary     : A text mode mail user agent
Description :
Mutt is a small but very powerful text-based MIME mail client.  Mutt
is highly configurable, and is well suited to the mail power user with
advanced features like key bindings, keyboard macros, mail threading,
regular expression searches and a powerful pattern matching language
for selecting groups of messages.

--------------------------------------------------------------------------------
Update Information:

This is an update that fixes a hostname verification of x.509 certificates and
a segmentation fault during reading message headers.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Apr 15 2011 Honza Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 5:1.5.21-5
- Fixed hostname verification of x.509 certificates.
  (rhbz#688756, CVE-2011-1429)
* Tue Mar 29 2011 Honza Horak <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 5:1.5.21-4
- Fixed segmentation faults during reading message headers (rhbz#676074)
* Tue Feb  8 2011 Fedora Release Engineering <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
- 5:1.5.21-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Sep 29 2010 jkeating - 5:1.5.21-2
- Rebuilt for gcc bug 634757
* Tue Sep 21 2010 Miroslav Lichvar <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> 5:1.5.21-1
- update to 1.5.21
- link with gpg-error when building with gpgme support (#621626)
* Fri Jul 30 2010 Miroslav Lichvar <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.>
5:1.5.20-3.20100718hg1a35f0
- update to hg snapshot 20100718hg1a35f0
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #688755 - CVE-2011-1429 mutt: improper verification of X.509
certificates can lead to MITM attacks on SMTP SSL connections
        https://bugzilla.redhat.com/show_bug.cgi?id=688755
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update mutt' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce