[Users] [Bug 3821] New: Potential security issue with libetpan

[noreply at thewildbeast.co.uk]

http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3821

            Bug ID: 3821
           Summary: Potential security issue with libetpan
    Classification: Unclassified
           Product: Claws Mail
           Version: other
          Hardware: All
                OS: All
            Status: NEW
          Severity: critical
          Priority: P3
         Component: Other
          Assignee: users at lists.claws-mail.org
          Reporter: perry at piermont.com

About a week ago, someone reported that fuzzing with AFL had found a
number of possible problems in libetpan's mime handling. See:

https://github.com/dinhviethoa/libetpan/issues/274
and
https://github.com/rwhitworth/libetpan-fuzz/

for details.

It is probably worth fixing these internally to the project if the
libetpan maintainer doesn't fix them quickly himself, since remotely
exploitable bugs are a potentially significant issue for users.

-- 
You are receiving this mail because:
You are the assignee for the bug.