FS#69284 - [libetpan] [Security] man-in-the-middle (CVE-2020-15953)
Attached to Project:
Arch Linux
Opened by Jonas Witschel (diabonas) - Sunday, 10 January 2021, 23:12 GMT
Last edited by Andreas Radke (AndyRTR) - Monday, 11 January 2021, 16:58 GMT
Opened by Jonas Witschel (diabonas) - Sunday, 10 January 2021, 23:12 GMT
Last edited by Andreas Radke (AndyRTR) - Monday, 11 January 2021, 16:58 GMT
|
Details
Summary
======= The package libetpan is vulnerable to man-in-the-middle via CVE-2020-15953. Guidance ======== Applying the two commits referenced below fixes the issue. References ========== https://security.archlinux.org/AVG-1428 https://github.com/dinhvh/libetpan/issues/386 https://github.com/dinhvh/libetpan/pull/388 https://github.com/dinhvh/libetpan/commit/1002a0121a8f5a9aee25357769807f2c519fa50b https://github.com/dinhvh/libetpan/commit/298460a2adaabd2f28f417a0f106cb3b68d27df9 |
This task depends upon
Closed by Andreas Radke (AndyRTR)
Monday, 11 January 2021, 16:58 GMT
Reason for closing: Fixed
Additional comments about closing: 1.9.4-3
Monday, 11 January 2021, 16:58 GMT
Reason for closing: Fixed
Additional comments about closing: 1.9.4-3