Red Hat Security Advisory: fetchmail security update

Fixed packages 3

Vulnerabilities 1

• Medium 5.3
  CVE-2026-94184

  Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-2026-01)

  A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while b…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 21, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2537395
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98583.json
• report
  https://access.redhat.com/security/cve/CVE-2026-94184
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-94184
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-94184
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2531984
• article
  https://gitlab.com/fetchmail/fetchmail/-/commit/cb5be5c38471eec19e519ace0bc569176317ea92
• article
  https://www.fetchmail.info/fetchmail-SA-2026-01.txt
• article
  https://www.openwall.com/lists/oss-security/2026/06/27/8