Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imapqresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imapqresync setting for QRESYNC is not enabled by default.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_name": "mutt", "binary_version": "1.5.24-1ubuntu0.6+esm2" }, { "binary_name": "mutt-dbg", "binary_version": "1.5.24-1ubuntu0.6+esm2" }, { "binary_name": "mutt-dbgsym", "binary_version": "1.5.24-1ubuntu0.6+esm2" }, { "binary_name": "mutt-patched", "binary_version": "1.5.24-1ubuntu0.6+esm2" }, { "binary_name": "mutt-patched-dbgsym", "binary_version": "1.5.24-1ubuntu0.6+esm2" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_name": "neomutt", "binary_version": "20191207+dfsg.1-1.1ubuntu0.1~esm1" }, { "binary_name": "neomutt-dbgsym", "binary_version": "20191207+dfsg.1-1.1ubuntu0.1~esm1" } ] }