Re: [Fetchmail-users] CVE-2021-36386 and fetchmail 6.5.0-beta3

[Matthias A. <mat...@gm...>]

Am 29.07.21 um 13:15 schrieb Andrew C Aitchison:
>
> Does 6.5.0-beta3 suffer from CVE-2021-36386 ?
>
> I have been running 6.5.0-beta3 without problems since April.
>
> Is a beta4 or a release candidate expected soon ?
>
> Thanks,
>
Hi Andrew,

yes it does have the same bug, and in practice it seems to hit rarely
and it is highly dependent on the system and configuration whether it
causes practical issues - this bug has been in the code for many years
and was only recently discovered...

I will merge the fix back and release a new 6.5.0-beta4 the next days.

Regards,

--
Matthias Andree