Описание
Security update for fetchmail
This update for fetchmail fixes the following issues:
- CVE-2021-36386: Fixed a missing variable initialization that can cause read from bad memory locations. (bsc#1188875)
- Change PASSWORDLEN from 64 to 256 (bsc#1188034)
Список пакетов
openSUSE Leap 15.3
fetchmail-6.3.26-20.14.1
fetchmailconf-6.3.26-20.14.1
Ссылки
- E-Mail link for openSUSE-SU-2021:2791-1
- SUSE Security Ratings
- SUSE Bug 1188034
- SUSE Bug 1188875
- SUSE CVE CVE-2021-36386 page
Описание
report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user.
Затронутые продукты
openSUSE Leap 15.3:fetchmail-6.3.26-20.14.1
openSUSE Leap 15.3:fetchmailconf-6.3.26-20.14.1
Ссылки
- CVE-2021-36386
- SUSE Bug 1188875
- SUSE Bug 1224188