Multiple vulnerabilities have been discovered in isync, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/isync | * | < 1.4.4 | >= 1.4.4 |
isync is an IMAP and MailDir mailbox synchronizer.
Multiple vulnerabilities have been discovered in isync. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All isync users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/isync-1.4.4"
A vulnerability in isync could allow remote attackers to perform man-in-the-middle attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-mail/isync | * | < 1.0.6 | >= 1.0.6 |
isync is an IMAP and MailDir mailbox synchronizer.
isync does not properly verify the server’s hostname against the CN field in the SSL certificate.
A remote server could perform man-in-the-middle attacks to disclose passwords or obtain other sensitive information.
There is no known workaround at this time.
All isync users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/isync-1.0.6"