oss-sec mailing list archives

Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode

From: Robert Buchholz <rbu () gentoo org>
Date: Sun, 15 Jun 2008 11:44:39 +0200

Hi Matthias,

On Friday 13 June 2008, Matthias Andree wrote:

Affects:        fetchmail release < 6.3.9 exclusively

Not affected:   fetchmail release 6.3.9 and newer
                systems without varargs (stdargs.h) support.

Corrected:      2008-06-13 fetchmail SVN (rev XXX)


Is there an ETA for the 6.3.9 release? The last advisory in 2007-09 also 
recommended to upgrade to this still unreleased version.


Robert

Attachment: signature.asc
Description: This is a digitally signed message part.

Current thread:

CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Matthias Andree (Jun 13)
- Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Robert Buchholz (Jun 15)
  - Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Matthias Andree (Jun 16)
    - Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Jonathan Smith (Jun 16)
    - Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Matthias Andree (Jun 17)
- Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Steven M. Christey (Jun 16)
- Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode Tomas Hoger (Jun 23)