MGASA-2020-0394
Updated claws-mail packages fix a security vulnerability
Shielded template's |program{} and |attach_program{} so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands. (No CVE).
What each source reports
OSV No score
Updated claws-mail packages fix a security vulnerability
Shielded template's |program{} and |attach_program{} so that the command-line that is executed does not allow sequencing such as with && || ;, preventing possible execution of nasty, or at least unexpected, commands. (No CVE).
- Record
MGASA-2020-0394- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
claws-mailMageia:7 |
before 3.17.8-1.mga7 | 3.17.8-1.mga7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2020-0394 is a vulnerability with no CVSS score yet in claws-mail, published October 24, 2020. No source lists public exploit code. Fixed in claws-mail 3.17.8-1.mga7.