Search for packages
Package details: pkg:alpm/archlinux/mutt@2.0.1-1
purl pkg:alpm/archlinux/mutt@2.0.1-1
Next non-vulnerable version 2.0.2-1
Latest non-vulnerable version 2.0.7-1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-n1xd-nbzj-aaaq
Aliases:
CVE-2020-28896
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.
2.0.2-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-05T14:48:53.884546+00:00 Arch Linux Importer Affected by VCID-n1xd-nbzj-aaaq https://security.archlinux.org/AVG-1288 36.1.0
2025-03-28T07:45:47.586407+00:00 Arch Linux Importer Affected by VCID-n1xd-nbzj-aaaq https://security.archlinux.org/AVG-1288 36.0.0
2024-09-18T02:00:49.038247+00:00 Arch Linux Importer Affected by VCID-n1xd-nbzj-aaaq https://security.archlinux.org/AVG-1288 34.0.1
2024-01-03T22:27:06.722537+00:00 Arch Linux Importer Affected by VCID-n1xd-nbzj-aaaq https://security.archlinux.org/AVG-1288 34.0.0rc1