EulerOS 2.0 SP3 : fetchmail (EulerOS-SA-2022-1162)

According to the versions of the fetchmail package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow mail...

openSUSE: Security Advisory for fetchmail (openSUSE-SU-2021:1591-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for fetchmail (openSUSE-SU-2021:4018-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2021-0548)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0391)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.

...

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances such as a certain situation with IMAP and PREAUTH.

...

openSUSE 15 Security Update : fetchmail (openSUSE-SU-2021:1591-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1591-1 advisory. - reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow ma...

OPENSUSE-SU-2021:1591-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS session encryption bypassing fetchmail-SA-2021-02 bsc1190069. - Update to 6.4.22 bsc1152964, jscSLE-18159, jscSLE-17903,...

openSUSE 15 Security Update : fetchmail (openSUSE-SU-2021:4018-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:4018-1 advisory. - reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow ma...

Security update for fetchmail (moderate)

openSUSE Security Update: Security update for fetchmail Announcement ID: openSUSE-SU-2021:1591-1 Rating: moderate References: 1152964 1174075 1181400 1188875 1190069 1190896 SLE-17903 SLE-18059 SLE-18159 Cross-References: CVE-2021-36386 CVE-2021-39272 CVSS scores: CVE-2021-36386 NVD : 7.5...

SUSE SLED15 / SLES15 Security Update : fetchmail (SUSE-SU-2021:4018-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4018-1 advisory. - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS...

SUSE: Security Advisory (SUSE-SU-2021:4018-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:4018-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS session encryption bypassing fetchmail-SA-2021-02 bsc1190069. - Update to 6.4.22 bsc1152964, jscSLE-18159, jscSLE-17903,...

OPENSUSE-SU-2021:4018-1 Security update for fetchmail

This update for fetchmail fixes the following issues: - CVE-2021-36386: Fixed DoS or information disclosure in some configurations bsc1188875. - CVE-2021-39272: Fixed STARTTLS session encryption bypassing fetchmail-SA-2021-02 bsc1190069. - Update to 6.4.22 bsc1152964, jscSLE-18159, jscSLE-17903,...

Security update for fetchmail (moderate)

openSUSE Security Update: Security update for fetchmail Announcement ID: openSUSE-SU-2021:4018-1 Rating: moderate References: 1152964 1174075 1181400 1188875 1190069 1190896 SLE-17903 SLE-18059 SLE-18159 Cross-References: CVE-2021-36386 CVE-2021-39272 CVSS scores: CVE-2021-36386 NVD : 7.5...

MGASA-2021-0548 Updated fetchmail packages fix security vulnerability

Update to fetchmail 6.4.24 fixes STARTTLS session encryption bypassing. CVE-2021-39272...

Updated fetchmail packages fix security vulnerability

Update to fetchmail 6.4.24 fixes STARTTLS session encryption bypassing. CVE-2021-39272...

Huawei EulerOS: Security Advisory for fetchmail (EulerOS-SA-2021-2658)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : fetchmail (EulerOS-SA-2021-2658)

According to the versions of the fetchmail package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow mail...