Описание
Security update for fetchmail
This update for fetchmail fixes the following issue:
- CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).
Список пакетов
openSUSE Leap 16.0
fetchmail-6.5.2-160000.4.1
fetchmailconf-6.5.2-160000.4.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1282055
- SUSE CVE CVE-2026-94184 page
Описание
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response. This may lead to remote code execution depending on stack-frame layout, or to authentication failure or process termination under memory hardening.
Затронутые продукты
openSUSE Leap 16.0:fetchmail-6.5.2-160000.4.1
openSUSE Leap 16.0:fetchmailconf-6.5.2-160000.4.1
Ссылки
- CVE-2026-94184
- SUSE Bug 1282055