Fetchmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Fetchmail NULL Character CA SSL Certificate Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Ubuntu Ubuntu Linux 8.10 powerpc

Ubuntu fetchmail_6.3.8-11ubuntu3.1_powerpc.deb
http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.3.8-11ubuntu 3.1_powerpc.deb

Ubuntu fetchmailconf_6.3.8-11ubuntu3.1_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.8-11ubuntu3.1_all.deb

Slackware Linux 12.2

Slackware fetchmail-6.3.11-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ fetchmail-6.3.11-i486-1_slack12.2.tgz

Debian Linux 5.0 alpha

Debian fetchmail_6.3.9~rc2-4+lenny1_alpha.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .9~rc2-4+lenny1_alpha.deb

Debian fetchmailconf_6.3.9~rc2-4+lenny1_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.9~rc2-4+lenny1_all.deb

Mandriva Linux Mandrake 2008.0

Mandriva fetchmail-6.3.8-4.2mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmail-daemon-6.3.8-4.2mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmailconf-6.3.8-4.2mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 sparc

Ubuntu fetchmail_6.3.9~rc2-4ubuntu1.1_sparc.deb
http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.3.9~rc2-4ubu ntu1.1_sparc.deb

Ubuntu fetchmailconf_6.3.9~rc2-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.9~rc2-4ubuntu1.1_all.deb

Debian Linux 4.0 amd64

Debian fetchmail_6.3.6-1etch2_amd64.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .6-1etch2_amd64.deb

Debian fetchmailconf_6.3.6-1etch2_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.6-1etch2_all.deb

Debian Linux 4.0 ia-32

Debian fetchmail_6.3.6-1etch2_i386.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .6-1etch2_i386.deb

Debian fetchmailconf_6.3.6-1etch2_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.6-1etch2_all.deb

Eric Raymond Fetchmail 6.3.6-rc1

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Ubuntu Ubuntu Linux 8.10 sparc

Ubuntu fetchmail_6.3.8-11ubuntu3.1_sparc.deb
http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.3.8-11ubuntu 3.1_sparc.deb

Ubuntu fetchmailconf_6.3.8-11ubuntu3.1_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.8-11ubuntu3.1_all.deb

Ubuntu Ubuntu Linux 9.04 lpia

Ubuntu fetchmail_6.3.9~rc2-4ubuntu1.1_lpia.deb
http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.3.9~rc2-4ubu ntu1.1_lpia.deb

Ubuntu fetchmailconf_6.3.9~rc2-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.9~rc2-4ubuntu1.1_all.deb

Debian Linux 5.0 armel

Debian fetchmail_6.3.9~rc2-4+lenny1_armel.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .9~rc2-4+lenny1_armel.deb

Debian fetchmailconf_6.3.9~rc2-4+lenny1_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.9~rc2-4+lenny1_all.deb

Eric Raymond Fetchmail 6.3.2 rc1

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Apple Mac OS X 10.6

Apple MacOSXUpdCombo10.6.2.dmg
For Mac OS X v10.6
http://www.apple.com/support/downloads/

Mandriva Linux Mandrake 2009.0 x86_64

Mandriva fetchmail-6.3.8-8.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmail-daemon-6.3.8-8.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmailconf-6.3.8-8.1mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

Debian fetchmail_6.3.9~rc2-4+lenny1_mips.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .9~rc2-4+lenny1_mips.deb

Debian fetchmailconf_6.3.9~rc2-4+lenny1_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.9~rc2-4+lenny1_all.deb

Ubuntu Ubuntu Linux 9.04 amd64

Ubuntu fetchmail_6.3.9~rc2-4ubuntu1.1_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.3. 9~rc2-4ubuntu1.1_amd64.deb

Ubuntu fetchmailconf_6.3.9~rc2-4ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.9~rc2-4ubuntu1.1_all.deb

Debian Linux 4.0 mips

Debian fetchmailconf_6.3.6-1etch2_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.6-1etch2_all.deb

Debian Linux 5.0 sparc

Debian fetchmail_6.3.9~rc2-4+lenny1_sparc.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .9~rc2-4+lenny1_sparc.deb

Debian fetchmailconf_6.3.9~rc2-4+lenny1_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.9~rc2-4+lenny1_all.deb

Mandriva Linux Mandrake 2008.1 x86_64

Mandriva fetchmail-6.3.8-7.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmail-daemon-6.3.8-7.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmailconf-6.3.8-7.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

Debian fetchmail_6.3.6-1etch2_arm.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .6-1etch2_arm.deb

Debian fetchmailconf_6.3.6-1etch2_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.6-1etch2_all.deb

Mandriva Linux Mandrake 2008.1

Mandriva fetchmail-6.3.8-7.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmail-daemon-6.3.8-7.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmailconf-6.3.8-7.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1 x86_64

Mandriva fetchmail-6.3.9-1.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmail-daemon-6.3.9-1.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmailconf-6.3.9-1.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Eric Raymond Fetchmail 6.3.6-rc2

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.3.6-rc4

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Debian Linux 4.0 powerpc

Debian fetchmail_6.3.6-1etch2_powerpc.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .6-1etch2_powerpc.deb

Debian fetchmailconf_6.3.6-1etch2_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.6-1etch2_all.deb

Ubuntu Ubuntu Linux 8.10 i386

Ubuntu fetchmail_6.3.8-11ubuntu3.1_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.3. 8-11ubuntu3.1_i386.deb

Ubuntu fetchmailconf_6.3.8-11ubuntu3.1_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.8-11ubuntu3.1_all.deb

Debian Linux 4.0 m68k

Debian fetchmailconf_6.3.6-1etch2_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.6-1etch2_all.deb

MandrakeSoft Enterprise Server 5

Mandriva fetchmail-6.3.8-8.1mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmail-daemon-6.3.8-8.1mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmailconf-6.3.8-8.1mdvmes5.i586.rpm
http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

Debian fetchmail_6.3.9~rc2-4+lenny1_s390.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .9~rc2-4+lenny1_s390.deb

Debian fetchmailconf_6.3.9~rc2-4+lenny1_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.9~rc2-4+lenny1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu fetchmail_6.3.8-10ubuntu1.1_lpia.deb
http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.3.8-10ubuntu 1.1_lpia.deb

Ubuntu fetchmailconf_6.3.8-10ubuntu1.1_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.8-10ubuntu1.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

Ubuntu fetchmail_6.3.2-2ubuntu2.3_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.3. 2-2ubuntu2.3_i386.deb

Ubuntu fetchmailconf_6.3.2-2ubuntu2.3_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/f/fetchmail/fetchmailc onf_6.3.2-2ubuntu2.3_all.deb

Debian Linux 5.0 hppa

Debian fetchmail_6.3.9~rc2-4+lenny1_hppa.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmail_6.3 .9~rc2-4+lenny1_hppa.deb

Debian fetchmailconf_6.3.9~rc2-4+lenny1_all.deb
http://security.debian.org/pool/updates/main/f/fetchmail/fetchmailconf _6.3.9~rc2-4+lenny1_all.deb

Slackware Linux 10.0

Slackware fetchmail-6.3.11-i486-1_slack10.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ fetchmail-6.3.11-i486-1_slack10.0.tgz

Slackware Linux 10.2

Slackware fetchmail-6.3.11-i486-1_slack10.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ fetchmail-6.3.11-i486-1_slack10.2.tgz

Apple Mac OS X 10.6.1

Apple MacOSXUpd10.6.2.dmg
For Mac OS X v10.6.1
http://www.apple.com/support/downloads/

MandrakeSoft Corporate Server 3.0

Mandriva fetchmail-6.2.5-3.8.C30mdk.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmail-daemon-6.2.5-3.8.C30mdk.i586.rpm
http://www.mandriva.com/en/download/

Mandriva fetchmailconf-6.2.5-3.8.C30mdk.i586.rpm
http://www.mandriva.com/en/download/

Eric Raymond Fetchmail 6.1 .0

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.1.3

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.2 .0

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.2.5 .4

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.2.5 .1

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.3 .0

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.3.2 rc4

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.3.2 rc2

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.3.2 rc3

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Eric Raymond Fetchmail 6.3.5

Eric Raymond fetchmail-6.3.11.tar.bz2
http://prdownload.berlios.de/fetchmail/fetchmail-6.3.11.tar.bz2

Slackware Linux 9.1

Slackware fetchmail-6.3.11-i486-1_slack9.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/f etchmail-6.3.11-i486-1_slack9.1.tgz