- Public report for Kopano Core at oss-sec mailing list: https://seclists.org/oss-sec/2021/q1/244 - Analysis (by myself) for Zarafa (predecessor product/project): https://seclists.org/oss-sec/2021/q1/256 - Kopano upstream fix: https://github.com/Kopano-dev/kopano-core/commit/512457466b87039c6a8d25887fdaca6173619546
zarafa-7.1.14-4.el7 contains a backport of the upstream fix (https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-615589a3ad)