neomutt (20171215+dfsg.1-1ubuntu0.1~esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: Information leakage via mishandled IMAP response 
    - debian/patches/ubuntu/CVE-2018-14349.patch: Handle NO response
    without message properly
    - CVE-2018-14349
  * SECURITY UPDATE: Buffer overflow for IMAP FETCH response
    - debian/patches/ubuntu/CVE-2018-14350.patch: Don't overflow stack
    buffer in msg_parse_fetch
    - CVE-2018-14350
    - CVE-2018-14358
  * SECURITY UPDATE: Mishandling of long IMAP status mailbox literal
    - debian/patches/ubuntu/CVE-2018-14351.patch: Ensure litlen isn't
    larger than our mailbox
    - CVE-2018-14351
  * SECURITY UPDATE: Stack-based buffer overflow in IMAP quote string
    - debian/patches/ubuntu/CVE-2018-14352.patch: imap_quote_string make
    room for quotes
    - CVE-2018-14352
  * SECURITY UPDATE: Interger underflow in IMAP quote string
    - debian/patches/ubuntu/CVE-2018-14353.patch: Check for int
    underflow in imap_quote_string
    - CVE-2018-14353
  * SECURITY UPDATE: ACE via remote IMAP servers using backquotes
    - debian/patches/ubuntu/CVE-2018-14354.patch: Quote path in
    imap_subscribe
    - CVE-2018-14354
  * SECURITY UPDATE: Mishandling of directory traversal in mailboxes
    - debian/patches/ubuntu/CVE-2018-14355.patch: Selectively cache
    headers
    - CVE-2018-14355
  * SECURITY UPDATE: Mishandling of zero-length UID
    - debian/patches/ubuntu/CVE-2018-14356.patch: Ensure UID in
    fetch_uidl
    - CVE-2018-14356
  * SECURITY UPDATE: ACE via remote IMAP automatic subscriptions
    - debian/patches/ubuntu/CVE-2018-14357.patch: quote imap strings
    more carefully
    - CVE-2018-14357
  * SECURITY UPDATE: Buffer overflow via base64 data
    - debian/patches/ubuntu/CVE-2018-14359.patch: Check outbuf length in
    mutt_to_base64()
    - CVE-2018-14359
  * SECURITY UPDATE: Stack-based buffer overflow from incorrect sscanf
    usage
    - debian/patches/ubuntu/CVE-2018-14360.patch: Set length modifiers
    for group and desc
    - CVE-2018-14360
  * SECURITY UPDATE: NNTP proceeds despite memory allocation fails
    - debian/patches/ubuntu/CVE-2018-14361.patch: Add alloc fail check
    in nntp_fetch_headers
    - CVE-2018-14361
  * SECURITY UPDATE: Unsafe interaction from '/' characters in cache
    pathnames and POP3 servers
    - debian/patches/ubuntu/CVE-2018-14362.patch: sanitise cache paths
    - CVE-2018-14362
    - CVE-2018-14363
  * SECURITY UPDATE: Exposed credentials over unclosed IMAP connection
    - debian/patches/ubuntu/CVE-2020-28896.patch: imap: close connection
    on all failures
    - CVE-2020-28896
  * SECURITY UPDATE: Buffer overflow allows read past end of input
    - debian/patches/ubuntu/CVE-2022-1328.patch: Fix uudecode buffer
    overflow
    - CVE-2022-1328

 -- John Breton <john.breton@canonical.com>  Tue, 07 Jan 2025 11:56:20 -0500

neomutt (20171215+dfsg.1-1) unstable; urgency=medium

  * New upstream release, fixes a couple of bugs.
  * debian/patches:
    + removed the previous neomutt-devel patch
    + removed debian-specific/566076-build_doc_adjustments.patch as we are now
      using autosetup.

 -- Antonio Radici <antonio@debian.org>  Fri, 15 Dec 2017 22:21:32 +0000

neomutt (20171208+dfsg.1-2) unstable; urgency=medium

  * debian/patches:
    + neomutt-devel/884324-fix-write-fcc-segfault.patch (Closes: 884324).

 -- Antonio Radici <antonio@debian.org>  Fri, 15 Dec 2017 07:27:49 +0000

neomutt (20171208+dfsg.1-1) unstable; urgency=medium

  * New upstream version.
  * debian/patches:
    + all refreshed, removed some autosetup related patches that
      are now upstream (in neomutt-devel/).
    + removed debian-specifc/882690-use_fqdn_from_etc_mailname.patch also
      upstream.

 -- Antonio Radici <antonio@debian.org>  Sat, 09 Dec 2017 08:34:25 +0000

neomutt (20171027+dfsg.1-4) unstable; urgency=medium

  * debian/patches:
    + neomutt-devel/0006-autosetup-fix-check-for-missing-sendmail.patch: fix
      autosetup build in relation to sendmail path (Closes: 883007).

 -- Antonio Radici <antonio@debian.org>  Sun, 03 Dec 2017 10:19:31 +0000

neomutt (20171027+dfsg.1-3) unstable; urgency=medium

  * debian/patches:
    + neomutt-devel/0005-add-flags-to-cc-for-build.patch: add the correct
      flags when building makedoc.
    + debian-specific/882690-use_fqdn_from_etc_mailname.patch: small tweak to
      address the resolution of https://github.com/neomutt/neomutt/issues/974.
  * debian/control:
    + Standards-Version updated to 4.1.2, no changes required.

 -- Antonio Radici <antonio@debian.org>  Sun, 03 Dec 2017 09:20:39 +0000

neomutt (20171027+dfsg.1-2) unstable; urgency=medium

  * debian/patches:
    + neomutt-devel/0001-autosetup-fix-out-of-tree-build.patch:
      imported an upstream patch to fix an issue with doc/ not building out of
      tree.
    + a set of 3 other patches (000[234]-.*) by Julian Klode to build
      correctly with autosetup.
    + debian-specific/882690-use_fqdn_from_etc_mailname.patch to properly set
      the hostname from /etc/mailname.

 -- Antonio Radici <antonio@debian.org>  Sun, 26 Nov 2017 07:20:16 +0000

neomutt (20171027+dfsg.1-1) unstable; urgency=medium

  * Removed generated autosetup/jimsh0.c to comply with DFSG (Closes: 882717).
    + The file was replaced with a B-D on jimsh.

 -- Antonio Radici <antonio@debian.org>  Sun, 26 Nov 2017 06:24:32 +0000

neomutt (20171027-2) unstable; urgency=medium

  * debian/rules: switch to configure.autosetup and remove the dependency from
    dh-autoreconf; autosetup is becoming the official configure script for
    neomutt.
  * debian/neomutt.clean: get rid of the temporary configure link created by
    debian/rules
  * debian/compat: switched to 10
  * debian/copyright: fixed the duplicate license problem

 -- Antonio Radici <antonio@debian.org>  Sat, 25 Nov 2017 19:38:29 +0000

neomutt (20171027-1) unstable; urgency=medium

  * Initial release (Closes: 882300)

 -- Antonio Radici <antonio@debian.org>  Wed, 22 Nov 2017 20:50:29 +0000
