Fedora Linux 8578 Published by

A claws-mail security update has been released for Fedora 32.



SECURITY: Fedora 32 Update: claws-mail-3.17.6-1.fc32


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-2def860ce7
2020-08-02 01:23:14.774290
--------------------------------------------------------------------------------

Name : claws-mail
Product : Fedora 32
Version : 3.17.6
Release : 1.fc32
URL :   http://claws-mail.org
Summary : Email client and news reader based on GTK+
Description :
Claws Mail is an email client (and news reader), based on GTK+, featuring
quick response, graceful and sophisticated interface, easy configuration,
intuitive operation, abundant features, and extensibility.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2020-15917 (STARTTLS protocol violation).
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 21 2020 Michael Schwendt - 3.17.6-1
- Update to 3.17.6, includes fix for CVE-2020-15917.
* Thu Jun 25 2020 Jitka Plesnikova - 3.17.5-2
- Perl 5.32 rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #1860414 - CVE-2020-15917 claws-mail: protocol violation because suffix data after STARTTLS is mishandled
  https://bugzilla.redhat.com/show_bug.cgi?id=1860414
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-2def860ce7' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys