Univention Bugzilla – Bug 51712
evolution-data-server: Multiple issues (4.4)
Last modified: 2020-07-29 16:50:45 CEST
New Debian evolution-data-server 3.22.7-1+deb9u1 fixes: This update addresses the following issue: * Response Injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)
--- mirror/ftp/4.3/unmaintained/4.3-0/source/evolution-data-server_3.22.7-1.dsc +++ apt/ucs_4.4-0-errata4.4-5/source/evolution-data-server_3.22.7-1+deb9u1.dsc @@ -1,3 +1,7 @@ +3.22.7-1+deb9u1 [Thu, 16 Jul 2020 10:17:21 +0200] Emilio Pozuelo Monfort <pochu@debian.org>: + + * CVE-2020-14928: Response Injection via STARTTLS in SMTP and POP3. + 3.22.7-1 [Fri, 24 Mar 2017 02:20:03 +0100] Michael Biebl <biebl@debian.org>: * New upstream release. <http://10.200.17.11/4.4-5/#7455837412413300954>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.4-5] 11e1e316fc Bug #51712: evolution-data-server 3.22.7-1+deb9u1 doc/errata/staging/evolution-data-server.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+)
<https://errata.software-univention.de/#/?erratum=4.4x658>