Medium ELSA-2022-1964 2 CVEs

Moderate: fetchmail security update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

[6.4.24-1]
- Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
Resolves: #1999275, #2002698

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	fetchmail	0:6.4.24-1.el8

Vulnerabilities 2

Unscored —

CVE-2021-36386

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, …

fetchmail fetchmail fetchmail fetchmail Debian Ubuntu Azure Linux Alpine

Jul 29, 2021
Unscored —

CVE-2021-39272

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation…

fetchmail fetchmail fetchmail fetchmail Debian Ubuntu Azure Linux Alpine

Aug 30, 2021