PatchTheCVEsylpheed vulnerabilities and fixes
Recent CVEs affecting sylpheed, with upgrade or downgrade steps. 2 tracked.
sylpheed has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-07-30. Highest priority: CVE-2017-17517 (score 48/100).
- CVE-2021-37746 MEDIUM 6.1 UPGRADE UPGRADE textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not ha
- CVE-2017-17517 HIGH 8.8 UPGRADE libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by t
FAQ
How do I fix sylpheed vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sylpheed being exploited right now?
None of the tracked sylpheed CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sylpheed CVE should I patch first?
CVE-2017-17517 currently ranks highest (48/100): libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by t.