CPython imaplib STARTTLS can treat buffered plaintext as TLS
The forwarded notice covers CVE-2026-115559; the snippet gives no versions, fix, or exploitation status.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #starttls
CVE-2026-103878: Apache Directory LDAP API: Injection of plaintext responses during StartTLS
Apache Directory LDAP API versions before 2.1.9 can leak plaintext responses when StartTLS follows a search.
USN-8487-2: curl regression
Ubuntu patches an incomplete curl fix for CVE-2026-8927 and related connection-reuse flaws.
Re: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installations
UnrealIRCd 6.2.7 hot-patch fixes a minor MITM command injection in STARTTLS S2S upgrade, flagged as LLM-reported.