OPENSUSE-SU-2020:1822-1
Vulnerability from csaf_opensuse - Published: 2020-11-02 23:25 - Updated: 2026-09-20 19:15Summary
Security update for claws-mail
Severity
Moderate
Notes
Title of the patch: Security update for claws-mail
Description of the patch: This update for claws-mail fixes the following issues:
- Additional cleanup of the template handling
claws-mail was updated to 3.17.8 (boo#1177967)
* Shielded template's |program{} and |attach_program{} so that the
command-line that is executed does not allow sequencing such as
with && || ;, preventing possible execution of nasty, or at least
unexpected, commands
* bug fixes: claws#4376
* updated English, French, and Spanish manuals
- Update to 3.17.7
* Image Viewer: Image attachments, when displayed, are now resized
to fit the available width rather than the available height.
* -d is now an alias to --debug.
* Libravatar plugin: New styles supported: Robohash and Pagan.
* SpamAssassin plugin: The 'Maximum size' option now matches
SpamAssassin's maximum; it can now handle messages up to 256MB.
* LiteHTML viewer plugin: The UI is now translatable.
Bug fixes:
* bug 4313, 'Recursion stack overflow with rebuilding folder
tree'
* bug 4372, '[pl_PL] Crash after 'Send later' without
recipient and then 'Close''
* bug 4373, 'attach mailto URI double free'
* bug 4374, 'insert mailto URI misses checks'
* bug 4384, 'U+00AD (soft hyphen) changed to space in
Subject'
* bug 4386, 'Allow Sieve config without userid without
warning'
* Add missing SSL settings when cloning accounts.
* Parsing of command-line arguments.
* PGP Core plugin: fix segv in address completion with a
keyring.
* Libravatar plugin: fixes to image display.
- Disable python-gtk plugin on suse_version > 1500: still relying
on python2, which is EOL.
- Update to 3.17.6:
* It is now possible to 'Inherit Folder properties and processing
rules from parent folder' when creating new folders with the
move message and copy message dialogues.
* A Phishing warning is now shown when copying a phishing URL, (in
addition to clicking a phishing URL).
* The progress window when importing an mbox file is now more
responsive.
* A warning dialogue is shown if the selected privacy system is
'None' and automatic signing amd/or encrypting is enabled.
* Python plugin: pkgconfig is now used to check for python2. This
enables the Python plugin (which uses python2) to be built on
newer systems which have both python2 and python3.
Bug fixes:
* bug 3922, 'minimize to tray on startup not working'
* bug 4220, 'generates files in cache without content'
* bug 4325, 'Following redirects when retrieving image'
* bug 4342, 'Import mbox file command doesn't work twice on a row'
* fix STARTTLS protocol violation
* fix initial debug line
* fix fat-fingered crash when v (hiding msgview) is pressed
just before c (check signature)
* fix non-translation of some Templates strings
- Update to 3.17.5
+ Inline Git patches now have colour syntax highlighting
The colours of these, and patch attachments, are configurable on
the 'Other' tab of the Display/Colors page of the general
preferences.
+ The previously hidden preference, 'summary_from_show', is now
configurable within the UI, on the 'Message List' tab of the
Display/Summaries page of the general preferences, 'Displayed in
From column [ ]'.
+ 'Re-edit' has been added to the message context menu when in the
Drafts folder.
+ Additional Date header formats are supported:
- weekday, month, day, hh, mm, ss, year, zone
- weekday, month, day, hh, mm, ss, year
+ LiteHtml viewer plugin: scrolling with the keyboard has been
implemented.
+ The included tools/scripts have been updated:
- eud2gc.py converted to Python 3
- tbird2claws.py converted to Python 3
- tbird2claws.py converted to Python 3
- google_search.pl has been replaced with ddg_search.pl (that is,
duckduckgo.com instead of google.com)
- fix_date.sh and its documentation have been updated
- multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
has been replaced by 'ddg'
- the outdated OOo2claws-mail.pl script has been removed
+ Updated manuals
+ Updated translations: British English, Catalan, Czech, Danish,
Dutch, French, German, Russian, Slovak, Spanish, Swedish,
Traditional Chinese, Turkish
+ bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
+ Misc bugs fixed:
- Fix crash in litehtml_viewer when tag has no href
- removed 'The following file has been attached...' dialogue
- MBOX import: give a better estimation of the time left and
grey out widgets while importing
- Fixed 'vcard.c:238:2: warning: ‘strncpy’ output truncate
before terminating nul copying as many bytes from a string
as its length'
- RSSyl: Fix handling deleted feed items where modified and
published dates do not match
- fix bolding of target folder
- when creating a new account, don't pre-fill data from the
default account
- respect 'default selection' settings when moving a msg with
manual filtering
- Fix printing of empty pages when the selected part is
rendered with a plugin not implementing print
- Addressbook folder selection dialogs: make sure folder list
is sorted and apply global prefs to get stripes in lists.
- when user cancels the GPG signing passphrase dialogue,
don't bother the user with an 'error' dialogue
- Fix imap keyword search. Libetpan assumes keyword search is
a MUST but RFC states it is a MAY. Fix advanced search on
MS Exchange
- fix SHIFT+SPACE in msg list, moving in reverse
- revert pasting images as attachments
- Fix help about command-line arguments that require a
parameter.
- Printing: only print as plain text if the part is of type
text
- fix a segfault with default info icon when trying to print
a non-text part.
- Add a test on build-time libetpan version to require the proper
version at run-time (boo#1157594)
- Move 'Mark all read/unread' menu entries where they belong.
remove-MarkAll-from-message-menu.patch (claws#4278)
add-MarkAll-to-folder-menu.patch (claws#4278)
- Make litehtml plugin build on Tumbleweed.
- Update to 3.17.4:
* New HTML viewer plugin: Litehtml viewer
* Added option 'Enable keyboard shortcuts' to the 'Keyboard
shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
* Compose: implemented copying of attached images to clipboard
* Compose: images and text/uri-list (files) can now be attached by
pasting into the Compose window
* Python plugin: window sizes are now remembered for the Python
console, the 'Open URLs' and the 'Set mailbox order' windows.
* Fancy plugin: the download-link feature now follows redirections
* MBOX export: the Enter key in the dialogue now starts the export
* The date (ISO format) has been added to log timestamps
* Update translations
- bug 1920, 'No automatic NNTP filtering'
- bug 2045, 'address book blocks focus on email window'
- bug 2131, 'Focus stealing after mail check'
- bug 2627, 'Filtering does not work on NNTP'
- bug 3070, 'misbehaving text wrapping when URL chars are present'
- bug 3838, 'Canceled right-click on message list leaves UI
in inconsistent state'
- bug 3977, 'Fix crashes when some external APIs fail'
- bug 3979, 'Hang (with killing needed) during action which
extracts attachments'
- bug 4029, 'segfault after deleting message in a window'
- bug 4031, 'fingerprint in SSL/TLS certificates for ...
(regress error)'
- bug 4037, 'Fix some small issues'
- bug 4142, 'Translation error on Russian'
- bug 4145, 'proxy server for sending doesn't work'
- bug 4155, 'remember directory of last saving'
- bug 4166, 'corrupted double-linked list'
- bug 4167, 'Max line length exceeded when forwarding mail'
- bug 4188, 'STL file is sent not as an attachment but as its
base64 representation in plaintext'
- CID 1442278, 'impossible to trigger buffer overflow'
- Make key accelerators from menu work in addressbook window
- save checkbox choices of display/summaries/defaults prefs
- Do not throw an error when cancelling 'Save email as...'.
- occasional crash on drag'n'drop of msgs
- possible stack overflow in vcalendar's Curl data handler
- crash when LDAP address source is defined in index, but
- support is disabled
- crash in Fancy plugin if one of the MIME parts has no
- -ID
- a few small memory leaks in scan_mailto_url()
- configure script for rare cases where python is not
installed
- incorrect charset conversion in sc_html_read_line().
- markup in 'key not fully trusted' warning in pgpcore
- use after free in rare code path in rssyl_subscribe()
- several memory leaks
- verify_folderlist_xml() for fresh starts
- printf formats for size_t and goffset arguments.
- alertpanel API use in win32 part of mimeview.c
- pid handling in debug output of kill_children_cb()
- incorrect pointer arithmetic in w32_filesel.c
Patchnames: openSUSE-2020-1822
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9.8 (Critical)
Affected products
Recommended
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Package Hub 15 SP2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for claws-mail",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for claws-mail fixes the following issues:\n\n- Additional cleanup of the template handling\n\nclaws-mail was updated to 3.17.8 (boo#1177967)\n\n * Shielded template\u0027s |program{} and |attach_program{} so that the\n command-line that is executed does not allow sequencing such as\n with \u0026\u0026 || ;, preventing possible execution of nasty, or at least\n unexpected, commands\n * bug fixes: claws#4376\n * updated English, French, and Spanish manuals\n\n- Update to 3.17.7 \n\n * Image Viewer: Image attachments, when displayed, are now resized\n to fit the available width rather than the available height.\n * -d is now an alias to --debug.\n * Libravatar plugin: New styles supported: Robohash and Pagan.\n * SpamAssassin plugin: The \u0027Maximum size\u0027 option now matches\n SpamAssassin\u0027s maximum; it can now handle messages up to 256MB.\n * LiteHTML viewer plugin: The UI is now translatable.\n Bug fixes:\n * bug 4313, \u0027Recursion stack overflow with rebuilding folder\n tree\u0027\n * bug 4372, \u0027[pl_PL] Crash after \u0027Send later\u0027 without\n recipient and then \u0027Close\u0027\u0027\n * bug 4373, \u0027attach mailto URI double free\u0027\n * bug 4374, \u0027insert mailto URI misses checks\u0027\n * bug 4384, \u0027U+00AD (soft hyphen) changed to space in\n Subject\u0027\n * bug 4386, \u0027Allow Sieve config without userid without\n warning\u0027\n * Add missing SSL settings when cloning accounts.\n * Parsing of command-line arguments.\n * PGP Core plugin: fix segv in address completion with a\n keyring.\n * Libravatar plugin: fixes to image display.\n\n- Disable python-gtk plugin on suse_version \u003e 1500: still relying\n on python2, which is EOL.\n\n- Update to 3.17.6:\n\n * It is now possible to \u0027Inherit Folder properties and processing\n rules from parent folder\u0027 when creating new folders with the\n move message and copy message dialogues.\n * A Phishing warning is now shown when copying a phishing URL, (in\n addition to clicking a phishing URL).\n * The progress window when importing an mbox file is now more\n responsive.\n * A warning dialogue is shown if the selected privacy system is\n \u0027None\u0027 and automatic signing amd/or encrypting is enabled.\n * Python plugin: pkgconfig is now used to check for python2. This\n enables the Python plugin (which uses python2) to be built on\n newer systems which have both python2 and python3.\n Bug fixes:\n * bug 3922, \u0027minimize to tray on startup not working\u0027\n * bug 4220, \u0027generates files in cache without content\u0027\n * bug 4325, \u0027Following redirects when retrieving image\u0027\n * bug 4342, \u0027Import mbox file command doesn\u0027t work twice on a row\u0027\n * fix STARTTLS protocol violation\n * fix initial debug line\n * fix fat-fingered crash when v (hiding msgview) is pressed\n just before c (check signature)\n * fix non-translation of some Templates strings\n\n\n- Update to 3.17.5\n\n + Inline Git patches now have colour syntax highlighting\n The colours of these, and patch attachments, are configurable on\n the \u0027Other\u0027 tab of the Display/Colors page of the general\n preferences.\n + The previously hidden preference, \u0027summary_from_show\u0027, is now\n configurable within the UI, on the \u0027Message List\u0027 tab of the\n Display/Summaries page of the general preferences, \u0027Displayed in\n From column [ ]\u0027.\n + \u0027Re-edit\u0027 has been added to the message context menu when in the\n Drafts folder.\n + Additional Date header formats are supported:\n - weekday, month, day, hh, mm, ss, year, zone\n - weekday, month, day, hh, mm, ss, year\n + LiteHtml viewer plugin: scrolling with the keyboard has been\n implemented.\n + The included tools/scripts have been updated:\n - eud2gc.py converted to Python 3\n - tbird2claws.py converted to Python 3\n - tbird2claws.py converted to Python 3\n - google_search.pl has been replaced with ddg_search.pl (that is,\n duckduckgo.com instead of google.com)\n - fix_date.sh and its documentation have been updated \n - multiwebsearch.pl \u0027fm\u0027 (freshmeat.net) has been removed; \u0027google\u0027\n has been replaced by \u0027ddg\u0027\n - the outdated OOo2claws-mail.pl script has been removed\n + Updated manuals\n + Updated translations: British English, Catalan, Czech, Danish,\n Dutch, French, German, Russian, Slovak, Spanish, Swedish,\n Traditional Chinese, Turkish\n + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248, \n claws#4253, claws#4257, claws#4277, claws#4278, claws#4305\n + Misc bugs fixed:\n - Fix crash in litehtml_viewer when tag has no href\n - removed \u0027The following file has been attached...\u0027 dialogue\n - MBOX import: give a better estimation of the time left and\n grey out widgets while importing\n - Fixed \u0027vcard.c:238:2: warning: \u2018strncpy\u2019 output truncate \n before terminating nul copying as many bytes from a string\n as its length\u0027\n - RSSyl: Fix handling deleted feed items where modified and\n published dates do not match \n - fix bolding of target folder\n - when creating a new account, don\u0027t pre-fill data from the\n default account\n - respect \u0027default selection\u0027 settings when moving a msg with\n manual filtering\n - Fix printing of empty pages when the selected part is\n rendered with a plugin not implementing print\n - Addressbook folder selection dialogs: make sure folder list\n is sorted and apply global prefs to get stripes in lists.\n - when user cancels the GPG signing passphrase dialogue,\n don\u0027t bother the user with an \u0027error\u0027 dialogue\n - Fix imap keyword search. Libetpan assumes keyword search is\n a MUST but RFC states it is a MAY. Fix advanced search on\n MS Exchange\n - fix SHIFT+SPACE in msg list, moving in reverse\n - revert pasting images as attachments\n - Fix help about command-line arguments that require a\n parameter.\n - Printing: only print as plain text if the part is of type\n text\n - fix a segfault with default info icon when trying to print\n a non-text part.\n\n- Add a test on build-time libetpan version to require the proper\n version at run-time (boo#1157594)\n\n- Move \u0027Mark all read/unread\u0027 menu entries where they belong.\n remove-MarkAll-from-message-menu.patch (claws#4278)\n add-MarkAll-to-folder-menu.patch (claws#4278)\n\n- Make litehtml plugin build on Tumbleweed.\n\n- Update to 3.17.4:\n\n * New HTML viewer plugin: Litehtml viewer\n * Added option \u0027Enable keyboard shortcuts\u0027 to the \u0027Keyboard\n shortcuts\u0027 frame on /Configuration/Preferences/Other/Miscellaneous\n * Compose: implemented copying of attached images to clipboard\n * Compose: images and text/uri-list (files) can now be attached by\n pasting into the Compose window\n * Python plugin: window sizes are now remembered for the Python\n console, the \u0027Open URLs\u0027 and the \u0027Set mailbox order\u0027 windows.\n * Fancy plugin: the download-link feature now follows redirections\n * MBOX export: the Enter key in the dialogue now starts the export\n * The date (ISO format) has been added to log timestamps\n * Update translations\n - bug 1920, \u0027No automatic NNTP filtering\u0027\n - bug 2045, \u0027address book blocks focus on email window\u0027\n - bug 2131, \u0027Focus stealing after mail check\u0027\n - bug 2627, \u0027Filtering does not work on NNTP\u0027\n - bug 3070, \u0027misbehaving text wrapping when URL chars are present\u0027\n - bug 3838, \u0027Canceled right-click on message list leaves UI\n in inconsistent state\u0027\n - bug 3977, \u0027Fix crashes when some external APIs fail\u0027\n - bug 3979, \u0027Hang (with killing needed) during action which\n extracts attachments\u0027\n - bug 4029, \u0027segfault after deleting message in a window\u0027\n - bug 4031, \u0027fingerprint in SSL/TLS certificates for ...\n (regress error)\u0027\n - bug 4037, \u0027Fix some small issues\u0027\n - bug 4142, \u0027Translation error on Russian\u0027\n - bug 4145, \u0027proxy server for sending doesn\u0027t work\u0027\n - bug 4155, \u0027remember directory of last saving\u0027\n - bug 4166, \u0027corrupted double-linked list\u0027\n - bug 4167, \u0027Max line length exceeded when forwarding mail\u0027\n - bug 4188, \u0027STL file is sent not as an attachment but as its\n base64 representation in plaintext\u0027\n - CID 1442278, \u0027impossible to trigger buffer overflow\u0027\n - Make key accelerators from menu work in addressbook window\n - save checkbox choices of display/summaries/defaults prefs\n - Do not throw an error when cancelling \u0027Save email as...\u0027.\n - occasional crash on drag\u0027n\u0027drop of msgs\n - possible stack overflow in vcalendar\u0027s Curl data handler\n - crash when LDAP address source is defined in index, but\n - support is disabled\n - crash in Fancy plugin if one of the MIME parts has no\n - -ID\n - a few small memory leaks in scan_mailto_url()\n - configure script for rare cases where python is not\n installed\n - incorrect charset conversion in sc_html_read_line().\n - markup in \u0027key not fully trusted\u0027 warning in pgpcore\n - use after free in rare code path in rssyl_subscribe()\n - several memory leaks\n - verify_folderlist_xml() for fresh starts\n - printf formats for size_t and goffset arguments.\n - alertpanel API use in win32 part of mimeview.c\n - pid handling in debug output of kill_children_cb()\n - incorrect pointer arithmetic in w32_filesel.c\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-1822",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1822-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:1822-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TJZJ7GCA3H35VDJV4TSCXVOQHIMHDZYO/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:1822-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TJZJ7GCA3H35VDJV4TSCXVOQHIMHDZYO/"
},
{
"category": "self",
"summary": "SUSE Bug 1157594",
"url": "https://bugzilla.suse.com/1157594"
},
{
"category": "self",
"summary": "SUSE Bug 1177967",
"url": "https://bugzilla.suse.com/1177967"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15917 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15917/"
}
],
"title": "Security update for claws-mail",
"tracking": {
"current_release_date": "2026-09-20T19:15:50Z",
"generator": {
"date": "2020-11-02T23:25:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:1822-1",
"initial_release_date": "2020-11-02T23:25:05Z",
"revision_history": [
{
"date": "2020-11-02T23:25:05Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T19:15:50Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"product": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"product_id": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail@3.17.8-bp152.3.6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"product": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"product_id": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail-devel@3.17.8-bp152.3.6.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"product": {
"name": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"product_id": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail-lang@3.17.8-bp152.3.6.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"product": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"product_id": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail@3.17.8-bp152.3.6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"product": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"product_id": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail-devel@3.17.8-bp152.3.6.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"product": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"product_id": "claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail@3.17.8-bp152.3.6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"product": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"product_id": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail-devel@3.17.8-bp152.3.6.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"product": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"product_id": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail@3.17.8-bp152.3.6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"product": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"product_id": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/claws-mail-devel@3.17.8-bp152.3.6.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP1",
"product": {
"name": "SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1"
}
},
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP2",
"product": {
"name": "SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2"
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.s390x as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch as component of SUSE Package Hub 15 SP1",
"product_id": "SUSE Package Hub 15 SP1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch"
},
"product_reference": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64 as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.s390x as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64 as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch as component of SUSE Package Hub 15 SP2",
"product_id": "SUSE Package Hub 15 SP2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch"
},
"product_reference": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"relates_to_product_reference": "SUSE Package Hub 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.s390x as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch"
},
"product_reference": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.s390x as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64"
},
"product_reference": "claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch"
},
"product_reference": "claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-15917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15917"
}
],
"notes": [
{
"category": "general",
"text": "common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15917",
"url": "https://www.suse.com/security/cve/CVE-2020-15917"
},
{
"category": "external",
"summary": "SUSE Bug 1174457 for CVE-2020-15917",
"url": "https://bugzilla.suse.com/1174457"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"SUSE Package Hub 15 SP2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"SUSE Package Hub 15 SP2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.1:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.1:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.1:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.2:claws-mail-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.aarch64",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.ppc64le",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.s390x",
"openSUSE Leap 15.2:claws-mail-devel-0:3.17.8-bp152.3.6.1.x86_64",
"openSUSE Leap 15.2:claws-mail-lang-0:3.17.8-bp152.3.6.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-02T23:25:05Z",
"details": "critical"
}
],
"title": "CVE-2020-15917"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…