PatchTheCVEofflineimap vulnerabilities
Recent CVEs affecting offlineimap products. 2 tracked.
offlineimap has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-11-13. Highest priority: CVE-2010-4533 (score 60/100).
- CVE-2010-4533 CRITICAL 9.8 MITIGATE UPGRADE offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use S
- CVE-2010-4532 MEDIUM 5.9 MITIGATE UPGRADE offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is speci
FAQ
How do I fix offlineimap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is offlineimap being exploited right now?
None of the tracked offlineimap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which offlineimap CVE should I patch first?
CVE-2010-4533 currently ranks highest (60/100): offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use S.