========================================================================== Ubuntu Security Notice USN-4598-1 October 22, 2020 libetpan vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: LibEtPan could be made to expose sensitive information over the network. Software Description: - libetpan: Mail Framework for C Language Details: It was discovered that LibEtPan incorrectly handled STARTTLS when using IMAP, SMTP and POP3. A remote attacker could possibly use this issue to perform a response injection attack. (CVE-2020-15953) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: libetpan-dev 1.6-1ubuntu0.1 libetpan17 1.6-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/4598-1 CVE-2020-15953 Package Information: https://launchpad.net/ubuntu/+source/libetpan/1.6-1ubuntu0.1