CVE catalog

CVE-2025-71063

UBUNTU-CVE-2025-71063

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.16% · Oct 27, 2026

Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianerrands1346.2.8-1vulnerable
Debianerrands1346.2.8-1+deb13u1fixed
Debianerrands1446.2.8-1vulnerable
Debianerrands1446.2.9-1vulnerable
Debianerrands1446.2.10-1fixed
Ubuntuerrands24.0445.0.4-2vulnerable
Ubuntuerrands24.0445.1.9-1vulnerable
Ubuntuerrands24.0445.1.9-2vulnerable
Ubuntuerrands25.1046.2.8-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianerrandsdeb1346.2.8-1+deb13u1Not reportedDEBIAN-CVE-2025-71063Not reported
Debianerrandsdeb1446.2.10-1Not reportedDEBIAN-CVE-2025-71063Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [errands]Fixed
    Details (2)
    • 46.2.8-1+deb13u1 · all · trixie

      Fixed · Fixed: 46.2.8-1+deb13u1

      pypi · errands · debian · 13

    • 46.2.8-1+deb13u1 · all · trixie

      Fixed · Fixed: 46.2.8-1+deb13u1

      pypi · errands · debian · 13

Observed:

References