December 2005

ID: 01125
Ref: 1057/2005
Date: 21 December 2005:13:31:19
Version: 1

---

Title: Two Fedora Update Notifications: 1. FEDORA-2005-1186 - Fedora Core 3 - fetchmail 2. FEDORA-2005-1187 - Fedora Core 4 - fetchmail
Abstract:
Vendors affected: Fedora
Operating systems affected: Fedora
Applications affected: Fedora

---

Title
=====

Two Fedora Update Notifications:

1. FEDORA-2005-1186 - Fedora Core 3 - fetchmail

2. FEDORA-2005-1187 - Fedora Core 4 - fetchmail

Detail
======

1. Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.
Fetchmail supports every remote-mail protocol currently in use on the
Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6,
and IPSEC) for retrieval. Then Fetchmail forwards the mail through
SMTP so you can read it through your favorite mail client.

2. Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.
Fetchmail supports every remote-mail protocol currently in use on the
Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6,
and IPSEC) for retrieval. Then Fetchmail forwards the mail through
SMTP so you can read it through your favorite mail client.





1.


- ---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1186
2005-12-20
- ---------------------------------------------------------------------

Product : Fedora Core 3
Name : fetchmail
Version : 6.2.5.5
Release : 1.fc3
Summary : A remote mail retrieval and forwarding utility.
Description :
Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.
Fetchmail supports every remote-mail protocol currently in use on the
Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6,
and IPSEC) for retrieval. Then Fetchmail forwards the mail through
SMTP so you can read it through your favorite mail client.

Install fetchmail if you need to retrieve mail over SLIP or PPP
connections.

- ---------------------------------------------------------------------
Update Information:

Fetchmail contains a bug where when running in multidrop
mode, a
malicious mail server can crash the client by sending a message
without headers.

This update fixes the issue.
- ---------------------------------------------------------------------
* Tue Dec 20 2005 Miloslav Trmac - 6.2.5.5-1.fc3
- - Update to fetchmail-6.2.5.5 (#176267, CVE-2005-4348)


- ---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

daba16d4cbf462e3b1bac38df7bbb892 SRPMS/fetchmail-6.2.5.5-1.fc3.src.rpm
ae0ea3ac26ce62758c407f24858e8ba2 x86_64/fetchmail-6.2.5.5-1.fc3.x86_64.rpm
02257f602e4b1b7367af678e0dcd523c x86_64/debug/fetchmail-debuginfo-6.2.5.5-1.fc3.x86_64.rpm
a70fcf8a0c625591dcccd53d2c4c004b i386/fetchmail-6.2.5.5-1.fc3.i386.rpm
fa4640af3727723284cc7e24164fd1ab i386/debug/fetchmail-debuginfo-6.2.5.5-1.fc3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
- ---------------------------------------------------------------------


2.

- ---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1187
2005-12-20
- ---------------------------------------------------------------------

Product : Fedora Core 4
Name : fetchmail
Version : 6.2.5.5
Release : 1.fc4
Summary : A remote mail retrieval and forwarding utility.
Description :
Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.
Fetchmail supports every remote-mail protocol currently in use on the
Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6,
and IPSEC) for retrieval. Then Fetchmail forwards the mail through
SMTP so you can read it through your favorite mail client.

Install fetchmail if you need to retrieve mail over SLIP or PPP
connections.

- ---------------------------------------------------------------------
Update Information:

Fetchmail contains a bug where when running in multidrop
mode, a
malicious mail server can crash the client by sending a message
without headers.

This update fixes the issue.
- ---------------------------------------------------------------------
* Tue Dec 20 2005 Miloslav Trmac - 6.2.5.5-1.fc4
- - Update to fetchmail-6.2.5.5 (#176267, CVE-2005-4348)


- ---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

b6ae10bb03c0d7772d77d607045fecc5 SRPMS/fetchmail-6.2.5.5-1.fc4.src.rpm
e1ee3d162be7c26575a7400588178b53 ppc/fetchmail-6.2.5.5-1.fc4.ppc.rpm
ecf46353c5dcdcbda53463687d1d60a0 ppc/debug/fetchmail-debuginfo-6.2.5.5-1.fc4.ppc.rpm
4b7270f4e090b48010102a3291576b56 x86_64/fetchmail-6.2.5.5-1.fc4.x86_64.rpm
9c47aafa233cc0823f4962f71b1eef14 x86_64/debug/fetchmail-debuginfo-6.2.5.5-1.fc4.x86_64.rpm
7ffdaf79e697d2037e8a1e2d681b35bf i386/fetchmail-6.2.5.5-1.fc4.i386.rpm
635f0b5b65056809db38de02c89c6be9 i386/debug/fetchmail-debuginfo-6.2.5.5-1.fc4.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
- ---------------------------------------------------------------------