The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade claws-mail | Jul 30, 2024 | Oct 15, 2014 |
| Suse | — | Upgrade claws-mail-debuginfoUpgrade claws-mail-develUpgrade claws-mail-debugsourceUpgrade claws-mailUpgrade claws-mail-lang | Dec 18, 2015 | Oct 14, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub