Fedora: 2020-45041afb19 Critical: STARTTLS Response Injection in EDS

The evolution-data-server package provides a unified backend for programs that work

with contacts, tasks, and calendar information.

It was originally developed for Evolution (hence the name), but is now used

by other packages.

Security fix for CVE-2020-14928 (Response Injection via STARTTLS in SMTP and

POP3)

* Thu Jul 16 2020 Milan Crha - 3.34.4-2

- Add patch for CVE-2020-14928 (Response Injection via STARTTLS in SMTP and POP3)

[ 1 ] Bug #1857470 - CVE-2020-14928 evolution-data-server: Response Injection via STARTTLS in SMTP and POP3

https://bugzilla.redhat.com/show_bug.cgi?id=1857470

su -c 'dnf upgrade --advisory FEDORA-2020-45041afb19' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/