Описание
Security update for claws-mail
This update for claws-mail fixes the following issues:
- CVE-2020-15917: Fixed an improper handling of suffix data after STARTTLS is mishandled (boo#1174457).
Список пакетов
openSUSE Leap 15.1
claws-mail-3.17.3-lp151.2.3.1
claws-mail-devel-3.17.3-lp151.2.3.1
claws-mail-lang-3.17.3-lp151.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2020:1116-1
- SUSE Security Ratings
- SUSE Bug 1174457
- SUSE CVE CVE-2020-15917 page
Описание
common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.
Затронутые продукты
openSUSE Leap 15.1:claws-mail-3.17.3-lp151.2.3.1
openSUSE Leap 15.1:claws-mail-devel-3.17.3-lp151.2.3.1
openSUSE Leap 15.1:claws-mail-lang-3.17.3-lp151.2.3.1
Ссылки
- CVE-2020-15917
- SUSE Bug 1174457