Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-39272
5.9
MEDIUMCVSS v3
Published
August 30, 2021
CVSS v2
4.3 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.
fetchmail/fetchmailGitLabTLS-enabled mail retrieval (POP3/IMAP/ETRN/ODMR) and forwarding (SMTP/LMTP/MDA) agent.
Note the Git branches: legacy_6x (6.5.x release maintenance) and next (mid-term future 7.x.x development)
GitLabTLS-enabled mail retrieval (POP3/IMAP/ETRN/ODMR) and forwarding (SMTP/LMTP/MDA) agent.
Note the Git branches: legacy_6x (6.5.x release maintenance) and next (mid-term future 7.x.x development)< 6.4.22NVD
Crates.io
fedora
Python Package Index
Docker Hub
NPM
RubyGems