Описание
Security update for claws-mail
This update for claws-mail fixes the following issues:
- CVE-2015-8614: additional fixes for buffer overrun issues which allowed remote attackers to cause a crash or have unspecified further impact (boo#959993)
Список пакетов
openSUSE Leap 42.1
claws-mail-3.12.0-7.1
claws-mail-devel-3.12.0-7.1
claws-mail-lang-3.12.0-7.1
Ссылки
- E-Mail link for openSUSE-SU-2016:0479-1
- SUSE Security Ratings
Описание
Multiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3) conv_sjistoeuc functions in codeconv.c in Claws Mail before 3.13.1 allow remote attackers to have unspecified impact via a crafted email, involving Japanese character set conversion.
Затронутые продукты
openSUSE Leap 42.1:claws-mail-3.12.0-7.1
openSUSE Leap 42.1:claws-mail-devel-3.12.0-7.1
openSUSE Leap 42.1:claws-mail-lang-3.12.0-7.1
Ссылки
- CVE-2015-8614
- SUSE Bug 959993
- SUSE Bug 960566