Red Hat Security Advisory: fetchmail security update

Fixed packages 3

Vulnerabilities 2

• Unscored —
  CVE-2021-36386

  report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, …

  fetchmail fetchmail fetchmail fetchmail Debian Ubuntu Azure Linux Alpine
  Jul 29, 2021
• Unscored —
  CVE-2021-39272

  Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation…

  fetchmail fetchmail fetchmail fetchmail Debian Ubuntu Azure Linux Alpine
  Aug 30, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1987766
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1999190
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1964.json
• report
  https://access.redhat.com/security/cve/CVE-2021-36386
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-36386
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-36386
• article
  https://www.fetchmail.info/fetchmail-SA-2021-01.txt
• report
  https://access.redhat.com/security/cve/CVE-2021-39272
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-39272
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-39272