PatchTheCVEgeary vulnerabilities and fixes
Recent CVEs affecting geary, with upgrade or downgrade steps. 2 tracked.
geary has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-08-26. Highest priority: CVE-2020-24661 (score 46/100).
- CVE-2020-24661 MEDIUM 5.9 UPGRADE MITIGATE GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using inva
- CVE-2014-5444 MEDIUM 4.3 UPGRADE Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which ma
FAQ
How do I fix geary vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is geary being exploited right now?
None of the tracked geary CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which geary CVE should I patch first?
CVE-2020-24661 currently ranks highest (46/100): GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using inva.