https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:29:28.819097+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:1964 ALSA-2022:1964 — Moderate: fetchmail security update 2026-10-03T18:29:28.834660+00:00

Affected: AlmaLinux:8: fetchmail

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client.

Security Fix(es):

* fetchmail: DoS or information disclosure when logging long messages (CVE-2021-36386)

* fetchmail: STARTTLS session encryption bypassing (CVE-2021-39272)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/cleanstart-2024-qk25555 CLEANSTART-2024-QK25555 — Fetchmail before 6 2026-10-03T18:29:28.834726+00:00

Affected: CleanStart: fetchmail

Security vulnerability affects the fetchmail package. Fetchmail before 6.

 https://cve.radiocsirt.org/vuln/euvd-2026-30558 EUVD-2026-30558 2026-10-03T18:29:28.834748+00:00 EUVD-2026-30558 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39272 fkie_cve-2021-39272 2026-10-03T18:29:28.834761+00:00

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

 https://cve.radiocsirt.org/vuln/ghsa-x8j8-pwr7-frjw GHSA-x8j8-pwr7-frjw 2026-10-03T18:29:28.834781+00:00

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

 https://cve.radiocsirt.org/vuln/gsd-2021-39272 gsd-2021-39272 2026-10-03T18:29:28.834794+00:00 gsd-2021-39272 https://cve.radiocsirt.org/vuln/msrc_cve-2021-39272 msrc_CVE-2021-39272 — Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances such as a certain situation… 2026-10-03T18:29:28.834805+00:00 msrc_CVE-2021-39272 https://cve.radiocsirt.org/vuln/oesa-2021-1360 OESA-2021-1360 — fetchmail security update 2026-10-03T18:29:28.834821+00:00

Affected: openEuler:20.03-LTS-SP1: fetchmail, openEuler:20.03-LTS-SP2: fetchmail

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so you can read it through your favorite mail client. Install fetchmail if you need to retrieve mail over SLIP or PPP connections. Security Fix(es): Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.(CVE-2021-39272)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1416-1 openSUSE-SU-2021:1416-1 — Security update for fetchmail 2026-10-03T18:29:28.834844+00:00

Security update for fetchmail

 https://cve.radiocsirt.org/vuln/suse-su-2021:3492-1 SUSE-SU-2021:3492-1 — Security update for fetchmail 2026-10-03T18:29:28.834858+00:00

Security update for fetchmail

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-39272 UBUNTU-CVE-2021-39272 2026-10-03T18:29:28.834871+00:00

Affected: Ubuntu:16.04:LTS: fetchmail, Ubuntu:18.04:LTS: fetchmail, Ubuntu:20.04:LTS: fetchmail

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-03T18:29:28.834889+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.