Mutt UTF-7 Internationalized Remote Folder Buffer Overrun Vulnerability Solution:
Conectiva has released an additional advisory CLA-2003:635 that contains fixes to address this issue in Balsa.
Users are advised to upgrade to version 1.4.1 (stable). The patched unstable version is 1.5.4.
OpenPKG has made fixed versions available, and released advisory OpenPKG-SA-2003.025 to address this issue.
Slackware has released fixes for this issue. Users are advised to upgrade to mutt-1.4.1i.
Gentoo Linux has addressed this issue in advisory 200303-19. Affected users have been advised to issue the following commands to upgrade the vulnerable package:
emerge sync
emerge mutt
emerge clean
Red Hat Linux has released an advisory (RHSA-2003:109-03). Information about obtaining and applying fixes are available in the referenced advisory.
Conectiva has released advisory CLA-2003:626 to address this issue. An additional advisory has been released (CLA-2003:630) which contains fixes which address this issue in Balsa.
Gentoo Linux has released a new advisory. Users who have installed net-mail/balsa are advised to upgrade to balsa-2.0.10 by issuing the following commands:
emerge sync
emerge balsa
emerge clean
Red Hat has also released an advisory (RHSA-2003:111-08) which contains upgrade details for Enterprise distributions, which are available through the Red Hat Network.
GNOME Balsa 1.2.4
Mutt Mutt 1.3.12
Mutt Mutt 1.3.16
Mutt Mutt 1.3.17
Mutt Mutt 1.3.22
Mutt Mutt 1.3.24
Mutt Mutt 1.3.25
Mutt Mutt 1.3.27
Mutt Mutt 1.3.28
Mutt Mutt 1.4 .0
Mutt Mutt 1.5.3
