Advisories » MGASA-2021-0082

Updated trojita packages fix security vulnerability

Publication date: 15 Feb 2021
Modification date: 15 Feb 2021
Type: security
Affected Mageia releases : 7
CVE: CVE-2020-15047

Description

Damian Poddebniak discovered a TLS verification failure in Trojitá. When
sending e-mails over SMTP, all TLS errors were ignored (CVE-2020-15047).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=26859
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15047
• https://www.openwall.com/lists/oss-security/2020/06/25/1
• https://gerrit.vesnicky.cesnet.cz/r/#/c/1035/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15047

SRPMS

7/core

• trojita-0.7-6.git20200625.1.mga7