AVG-2579 log

Package isync
Status Fixed
Severity Medium
Type arbitrary code execution
Affected 1.4.3-1
Fixed 1.4.4-1
Current 1.4.4-4 [extra]
Ticket None
Created Mon Nov 22 21:38:33 2021
Issue Severity Remote Type Description
CVE-2021-44143 Medium Yes Arbitrary code execution
A security issue was found in mbsync in isync 1.4.0 before version 1.4.4. Due to an unchecked condition, a malicious or compromised IMAP server could use a...
CVE-2021-3657 Medium Yes Arbitrary code execution
A security issue was found in mbsync in isync versions before 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or...
Date Advisory Package Type
03 Dec 2021 ASA-202112-5 isync arbitrary code execution