Skip to content
OpenAdvisories
Unscored DLA-106-1 3 CVEs

getmail4 - security update

Published Dec 12, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 getmail4 4.46.0-1~deb6u1

Vulnerabilities 3

  • Unscored —
    CVE-2014-7273

    The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, w…

  • Unscored —
    CVE-2014-7274

    The IMAP-over-SSL implementation in getmail 4.44.0 does not verify that the server hostname matches a domain name in th…

  • Unscored —
    CVE-2014-7275

    The POP3-over-SSL implementation in getmail 4.0.0 through 4.44.0 does not verify X.509 certificates from SSL servers, w…