Summary
It was discovered that IMAPFilter did not validate the hostname in SSL/TLS
server certificates. A remote attacker could possibly use this issue to
intercept secure communications.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | imapfilter | 1:2.6.4-1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | imapfilter | 1:2.6.11-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.
References
-
report
https://ubuntu.com/security/CVE-2016-10937