Accepting request 849753 from home:AndreasStieger:branches:server:mail

mutt 2.0.2 CVE-2020-28896 boo#1179035

OBS-URL: https://build.opensuse.org/request/show/849753
OBS-URL: https://build.opensuse.org/package/show/server:mail/mutt?expand=0&rev=229

mutt-2.0.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:93a4138ca795d2668e25c8e95c9ef2082447431423163decda83e66a4e42aeaf
-size 5287742

mutt-2.0.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:471218babe97968a45704f1e1e17523c4620ad1f92bae4143a4c9749ab1411c8
+size 5293613

mutt.changes

@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri Nov 20 22:13:06 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 2.0.2:
+  * CVE-2020-28896: Ensure IMAP connection is closed after a
+    connection error to avoid sending credentials over an
+    unencrypted connection boo#1179035
+
 -------------------------------------------------------------------
 Tue Nov 10 09:10:53 UTC 2020 - Dr. Werner Fink <werner@suse.de>
 

mutt.spec

@@ -20,7 +20,7 @@
 %bcond_with    mutt_openssl
 %bcond_without mutt_gnutls
 Name:           mutt
-Version:        2.0.0
+Version:        2.0.2
 Release:        0
 Summary:        Mail Program
 # ftp://ftp.mutt.org/mutt/devel/