Описание
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| claws-mail | fixed | 3.18.0-1 | package | |
| claws-mail | no-dsa | bullseye | package | |
| claws-mail | no-dsa | buster | package | |
| claws-mail | no-dsa | stretch | package | |
| sylpheed | removed | package | ||
| sylpheed | fixed | 3.8.0~beta1-2+deb13u1 | trixie | package |
| sylpheed | fixed | 3.8.0~beta1-1+deb12u1 | bookworm | package |
| sylpheed | no-dsa | bullseye | package | |
| sylpheed | no-dsa | buster | package | |
| sylpheed | no-dsa | stretch | package |
Примечания
https://git.claws-mail.org/?p=claws.git;a=commit;h=ac286a71ed78429e16c612161251b9ea90ccd431
EPSS
Связанные уязвимости
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.
ALT-PU-2023-1122: package `sylpheed` update to version 3.7.0-alt0.6
ALT-PU-2021-2495: package `sylpheed` update to version 3.7.0-alt0.5
EPSS