Linux Distros Unpatched Vulnerability : CVE-2019-8337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked. CVE-2019-8337 Note th...

CVE-2019-8337

CVE-2019-8337 affects msmtp 1.8.2 and mpop 1.4.3, where, with the default tls_trust_file configuration, certificate-verification results are not properly checked. This can lead to certificate verification bypass for TLS connections, per multiple sources in the provided material. The Arch Linux ad...

msmtp -- certificate-verification issue

msmtp developers report: In msmtp 1.8.2, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...