Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:geary:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Geary (5e50c2e4-0b67-53ae-a398-b32306d68941) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/geary |
purl2cpe | 2026-06-01 10:17:23.077448 |
pkg:deb/ubuntu/geary |
purl2cpe | 2026-06-01 10:17:23.077452 |
pkg:github/gnome/geary |
purl2cpe | 2026-06-01 10:17:23.077454 |
pkg:rpm/fedora/geary |
purl2cpe | 2026-06-01 10:17:23.077457 |
pkg:rpm/opensuse/geary |
purl2cpe | 2026-06-01 10:17:23.077460 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-24661 |
vulnerable | 2026-06-08 05:22:35.280320 |
Details available
GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail.
Published: 2020-08-26T15:06:03.000Z
Updated: 2024-08-04T15:19:09.066Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.