Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:2771-1

Опубликовано: 18 авг. 2021
Источник: suse-cvrf

Описание

Security update for fetchmail

This update for fetchmail fixes the following issues:

  • CVE-2021-36386: DoS or information disclosure in some configurations (bsc#1188875)
  • Change PASSWORDLEN from 64 to 256 [bsc#1188034]
  • Set the hostname for SNI when using TLS [bsc#1182807]
  • Allow --syslog option in daemon mode. (bsc#1033081)
  • Set the hostname for SNI when using TLS. (bsc#1182807)
  • Change PASSWORDLEN from 64 to 256 (bsc#1188034)

Список пакетов

SUSE Linux Enterprise Server 12 SP2-BCL
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server 12 SP3-BCL
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server 12 SP3-LTSS
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server 12 SP4-LTSS
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server 12 SP5
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE OpenStack Cloud 8
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE OpenStack Cloud 9
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1
SUSE OpenStack Cloud Crowbar 9
fetchmail-6.3.26-13.12.1
fetchmailconf-6.3.26-13.12.1

Ссылки

Описание

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:fetchmail-6.3.26-13.12.1
SUSE Linux Enterprise Server 12 SP2-BCL:fetchmailconf-6.3.26-13.12.1
SUSE Linux Enterprise Server 12 SP3-BCL:fetchmail-6.3.26-13.12.1
SUSE Linux Enterprise Server 12 SP3-BCL:fetchmailconf-6.3.26-13.12.1
Ссылки
Уязвимость SUSE-SU-2021:2771-1