ALT-PU-2020-2306-1
Package evolution-data-server updated to version 3.36.4-alt1 for branch sisyphus in task 254400.
Closed vulnerabilities
Published: 2020-07-17
BDU:2021-01745
Уязвимость сервера базы данных evolution-data-server, связанная с недостаточной нейтрализацией специальных элементов в запросе, позволяющая нарушителю оказать воздействие на целостность данных
Severity: MEDIUM (5.9)
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
References:
Published: 2020-07-17
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-14928
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
Severity: MEDIUM (5.9)
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
References:
- https://bugzilla.suse.com/show_bug.cgi?id=1173910
- https://bugzilla.suse.com/show_bug.cgi?id=1173910
- https://gitlab.gnome.org/GNOME//evolution-data-server/commit/ba82be72cfd427b5d72ff21f929b3a6d8529c4df
- https://gitlab.gnome.org/GNOME//evolution-data-server/commit/ba82be72cfd427b5d72ff21f929b3a6d8529c4df
- https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/f404f33fb01b23903c2bbb16791c7907e457fbac
- https://gitlab.gnome.org/GNOME/evolution-data-server/-/commit/f404f33fb01b23903c2bbb16791c7907e457fbac
- https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/226
- https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/226
- https://lists.debian.org/debian-lts-announce/2020/07/msg00012.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00012.html
- FEDORA-2020-45041afb19
- FEDORA-2020-45041afb19
- https://security-tracker.debian.org/tracker/DLA-2281-1
- https://security-tracker.debian.org/tracker/DLA-2281-1
- https://security-tracker.debian.org/tracker/DSA-4725-1
- https://security-tracker.debian.org/tracker/DSA-4725-1
- USN-4429-1
- USN-4429-1
- DSA-4725
- DSA-4725