[Bug 1177967] VUL-0: claws-mail: shell command expansion via template commands program{} and attach_program{}

https://bugzilla.suse.com/show_bug.cgi?id=1177967 https://bugzilla.suse.com/show_bug.cgi?id=1177967#c4 --- Comment #4 from Swamp Workflow Management --- openSUSE-SU-2020:1822-1: An update that solves one vulnerability and has one errata is now available. Category: security (moderate) Bug References: 1157594,1177967 CVE References: CVE-2020-15917 JIRA References: Sources used: openSUSE Leap 15.2 (src): claws-mail-3.17.8-lp152.3.6.1 openSUSE Leap 15.1 (src): claws-mail-3.17.8-lp151.2.6.1 openSUSE Backports SLE-15-SP2 (src): claws-mail-3.17.8-bp152.3.6.1 openSUSE Backports SLE-15-SP1 (src): claws-mail-3.17.8-bp151.3.6.1 -- You are receiving this mail because: You are on the CC list for the bug.