Stay Secure with the Latest Linux Advisories

security advisorycommand executionclaws-mail

Mageia: 2020-0394 Moderate: Claws-Mail Command Execution Mitigation

Shielded template's |program{} and |attach_program{} so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands. (No CVE). . MGASA-2020-0394 - Updated claws-mail packages fix a security vulnerability Publication date: 24 Oct 2020 URL: https://advisories.mageia.org/MGASA-2020-0394.html Type: security Affected Mageia releases: 7 Shielded template's |program{} and |attach_program{} so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands. (No CVE). References: - https://bugs.mageia.org/show_bug.cgi?id=27458 - SRPMS: - 7/core/claws-mail-3.17.8-1.mga7 . The Claws-mail software has undergone updates to resolve command execution vulnerabilities, promoting consistent performance and maintaining data integrity.. Claws Mail Security, Mageia Update, Command Execution Protection, Template Security, Software Update. . LinuxSecurity.com Team

Oct 24, 2020 Mageia