mutt-2.3.2-1.1 on GA media (moderate)

mutt-2.3.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10695-1 Rating: moderate Cross-References: CVE-2026-43859 CVE-2026-43861 CVE-2026-43862 CVE-2026-43863 CVSS scores: CVE-2026-43859 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-43859 SUSE : 6.3...

SUSE CVE-2026-43859

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

SUSE CVE-2026-43860

mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest...

SUSE CVE-2026-43861

mutt before 2.3.2 does not check for '\0' in urlpctdecode...

SUSE CVE-2026-43862

In mutt before 2.3.2, the imapauthgss security level is mishandled...

SUSE CVE-2026-43863

mutt before 2.3.2 has an infinite loop in dataobjecttostream in crypt-gpgme.c...

SUSE CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

PT-2026-37369

These are all security issues fixed in the mutt-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10695-1 mutt-2.3.2-1.1 on GA media

These are all security issues fixed in the mutt-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-43863

mutt before 2.3.2 has an infinite loop in dataobjecttostream in crypt-gpgme.c...

CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43859

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

CVE-2026-43860

mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest...

CVE-2026-43861

mutt before 2.3.2 does not check for '\0' in urlpctdecode...

CVE-2026-43862

In mutt before 2.3.2, the imapauthgss security level is mishandled...

UBUNTU-CVE-2026-43859

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

CVE-2026-43862

In mutt before 2.3.2, the imapauthgss security level is mishandled...

CVE-2026-43860

mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest...

CVE-2026-43861

mutt before 2.3.2 does not check for '\0' in urlpctdecode...

UBUNTU-CVE-2026-43860

mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest...