Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:3006-1

Опубликовано: 23 авг. 2024
Источник: suse-cvrf

Описание

Security update for fetchmail

This update for fetchmail fixes the following issues:

  • Fixed regression in patch for CVE-2021-36386 (bsc#1224188)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
fetchmail-6.3.26-13.18.1
fetchmailconf-6.3.26-13.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
fetchmail-6.3.26-13.18.1
fetchmailconf-6.3.26-13.18.1

Ссылки

Описание

report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:fetchmail-6.3.26-13.18.1
SUSE Linux Enterprise Server 12 SP5:fetchmailconf-6.3.26-13.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:fetchmail-6.3.26-13.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:fetchmailconf-6.3.26-13.18.1
Ссылки