[SECURITY] Fedora Core 4 Update: fetchmail-
Posted on: 12/21/2005 12:12 AM

A new update is available for Fedora Core - [SECURITY] Fedora Core 4 Update: fetchmail- Here the announcement:

Fedora Update Notification

Product : Fedora Core 4
Name : fetchmail
Version :
Release : 1.fc4
Summary : A remote mail retrieval and forwarding utility.
Description :
Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.
Fetchmail supports every remote-mail protocol currently in use on the
Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6,
and IPSEC) for retrieval. Then Fetchmail forwards the mail through
SMTP so you can read it through your favorite mail client.

Install fetchmail if you need to retrieve mail over SLIP or PPP

Update Information:

Fetchmail contains a bug where when running in multidrop
mode, a
malicious mail server can crash the client by sending a message
without headers.

This update fixes the issue.
* Tue Dec 20 2005 Miloslav Trmac lt;mitr@redhat.comgt; -
- Update to fetchmail- (#176267, CVE-2005-4348)

This update can be downloaded from:

b6ae10bb03c0d7772d77d607045fecc5 SRPMS/fetchmail-
e1ee3d162be7c26575a7400588178b53 ppc/fetchmail-
ecf46353c5dcdcbda53463687d1d60a0 ppc/debug/fetchmail-debuginfo-
4b7270f4e090b48010102a3291576b56 x86_64/fetchmail-
9c47aafa233cc0823f4962f71b1eef14 x86_64/debug/fetchmail-debuginfo-
7ffdaf79e697d2037e8a1e2d681b35bf i386/fetchmail-
635f0b5b65056809db38de02c89c6be9 i386/debug/fetchmail-debuginfo-

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.

Printed from Linux Compatible (http://www.linuxcompatible.org/news/story/security_fedora_core_4_update_fetchmail_6255_1fc4.html)