Release date:
2026-10-05 09:23:52 UTC
Description:
- CVE-2026-43859: use memcpy() for the IMAP CRAM-MD5 secret digest
- CVE-2026-43860: fix one-byte truncation of the IMAP CRAM-MD5 digest
- CVE-2026-43862: check GSSAPI security level size in imap_auth_gss()
- CVE-2026-43863: fix infinite loop in gpgme data_object_to_stream()
- CVE-2026-43864: fix NULL dereference in show_sig_summary()
Updated packages:
-
mutt-2.2.6-1.el9_2.tuxcare.els4.aarch64.rpm
sha:c4f6dfa15fd9d5211089e2ac2e5b243591da9283f46642c5012e28486643fcf2
-
mutt-2.2.6-1.el9_2.tuxcare.els4.i686.rpm
sha:5efd35f7ace2dae850643fa306b0da0d74f23ffe8589482761c6c77faf1c1c7c
-
mutt-2.2.6-1.el9_2.tuxcare.els4.x86_64.rpm
sha:3d572c83b5363776c16c94e5d047cb135cb09a2dadebce7d0a8902b279006369
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
