CVE:CVE-2020-15917
CNNVD:CNNVD-202007-1413
Claws Mail是一款基于GTK+语言编写的开源电子邮件客户端和新闻聚合器。
Claws Mail 3.17.6之前版本中的common/session.c文件存在安全漏洞，该漏洞源于程序未正确处理STARTTLS之后的后缀数据。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade claws-mail claws-mail to a higher version than 3.17.6,and avoid the version (,3.17.6); Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,15.0:sp2,and avoid the version 15.0:sp1,15.0:sp2; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2