Bug#993163: fetchmail: CVE-2021-39272

2021-08-28 Thread GCS
Hi Matthias, On Sat, Aug 28, 2021 at 11:27 AM Matthias Andree wrote: > Just a word of warning, this isn't your pick three git commits with > trivial fixes - the backport will require proper testing, too, and it > will require some of the 42 patches since fetchmail 6.4.21 that are NOT > marked SEC

Bug#993163: fetchmail: CVE-2021-39272

2021-08-28 Thread Matthias Andree
Just a word of warning, this isn't your pick three git commits with trivial fixes - the backport will require proper testing, too, and it will require some of the 42 patches since fetchmail 6.4.21 that are NOT marked SECURITY - for instance, 74771392 and 616e8c70, and translation updates as they ar

Bug#993163: fetchmail: CVE-2021-39272

2021-08-28 Thread Salvatore Bonaccorso
Source: fetchmail Version: 6.4.21-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Control: found -1 6.4.16-4 Control: found -1 6.4.0~beta4-3+deb10u1 Control: found -1 6.4.0~beta4-1 Hi, The following vulnerability was published for fetchmail. C