Lucene search
Gentoo FoundationMGASA-2020-0390HistoryOct 21, 2020 - 4:07 p.m.
Updated geary package fixes a security vulnerability
2020-10-2116:07:53
Gentoo Foundation
advisories.mageia.org
9
0.002 Low
EPSS
Percentile
56.4%
GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail. (CVE-2020-24661)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 7 | noarch | geary | < 3.32.1-1.1 | geary-3.32.1-1.1.mga7 |
Related
nessus
nessus
Fedora 31 : geary (2020-95f2c5cc25)
2020-09-09 00:00:00
Fedora 32 : geary (2020-d445fb484a)
2020-09-04 00:00:00
cvelist
cvelist
CVE-2020-24661
2020-08-26 15:06:03
veracode
veracode
Information Disclosure
2020-09-16 08:27:11
openvas
openvas
Fedora: Security Advisory for geary (FEDORA-2020-d445fb484a)
2020-09-04 00:00:00
Fedora: Security Advisory for geary (FEDORA-2020-95f2c5cc25)
2020-09-09 00:00:00
Mageia: Security Advisory (MGASA-2020-0390)
2022-01-28 00:00:00
osv
osv
CVE-2020-24661
2020-08-26 16:15:12
ubuntucve
ubuntucve
CVE-2020-24661
2020-08-26 00:00:00
debiancve
debiancve
CVE-2020-24661
2020-08-26 16:15:00
cve
cve
CVE-2020-24661
2020-08-26 16:15:12
prion
prion
Code injection
2020-08-26 16:15:00
fedora
fedora
[SECURITY] Fedora 32 Update: geary-3.36.3.1-1.fc32
2020-09-03 16:41:18
[SECURITY] Fedora 31 Update: geary-3.34.2-2.fc31
2020-09-08 15:14:16
alpinelinux
alpinelinux
CVE-2020-24661
2020-08-26 16:15:00