Amazon Linux 1 Security Advisory: ALAS-2014-310
Advisory Release Date: 2014-03-24 23:33 Pacific
Advisory Updated Date: 2014-09-17 22:53 Pacific
A heap-based buffer overflow flaw was found in the way mutt processed certain email headers. A remote attacker could use this flaw to send an email with specially crafted headers that, when processed, could cause mutt to crash or, potentially, execute arbitrary code with the permissions of the user running mutt. (CVE-2014-0467)
Affected Packages:
mutt
Issue Correction:
Run yum update mutt to update your system.
i686:
mutt-debuginfo-1.5.20-4.20091214hg736b6a.7.amzn1.i686
mutt-1.5.20-4.20091214hg736b6a.7.amzn1.i686
src:
mutt-1.5.20-4.20091214hg736b6a.7.amzn1.src
x86_64:
mutt-debuginfo-1.5.20-4.20091214hg736b6a.7.amzn1.x86_64
mutt-1.5.20-4.20091214hg736b6a.7.amzn1.x86_64