Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package evolution-data-server for
openSUSE:Factory checked in at 2021-07-29 21:31:16
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/evolution-data-server (Old)
and /work/SRC/openSUSE:Factory/.evolution-data-server.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "evolution-data-server"
Thu Jul 29 21:31:16 2021 rev:226 rq:909090 version:3.40.3
Changes:
--------
---
/work/SRC/openSUSE:Factory/evolution-data-server/evolution-data-server.changes
2021-07-21 19:06:51.903342055 +0200
+++
/work/SRC/openSUSE:Factory/.evolution-data-server.new.1899/evolution-data-server.changes
2021-07-29 21:31:57.456771537 +0200
@@ -302,0 +303 @@
+- Drop CVE-2020-14928.patch: fixed upstream.
@@ -369,0 +371,2 @@
+- Drop CVE-2020-16117.patch: fixed upstream
+ (glgo#GNOME/evolution-data-server#189)
@@ -410,0 +414,8 @@
+
+-------------------------------------------------------------------
+Fri Feb 13 20:27:50 UTC 2020 - Michael Gorse <[email protected]>
+
+- Add CVE-2020-16117.patch: Fix crash on malformed server response
+ with minimal capabilities (boo#1174712 CVE-2020-16117).
+- Add CVE-2020-14928.patch: Response injection via STARTTLS in SMTP
+ and POP3 (boo#1173910 CVE-2020-14928).
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
