Ubuntu Security Notice 4598-1 - It was discovered that LibEtPan incorrectly handled STARTTLS when using IMAP, SMTP and POP3. A remote attacker could possibly use this issue to perform a response injection attack.
d19bb3d7c5778cad2232b0d3f1d4767258f76d7dff5b87c5147ddaeec6110b97
Gentoo Linux Security Advisory 202007-55 - A vulnerability was discovered in libetpan's STARTTLS handling, possibly allowing an integrity/confidentiality compromise. Versions less than 1.9.4-r1 are affected.
1d6d3a08fe146e5839a4012167d4cb967786952ff48d7e9cdf5461ec0e750dea