{
  "action": "In general, a standard system update will make all the necessary changes.",
  "cves": [
    "CVE-2021-36386",
    "CVE-2025-61962",
    "CVE-2026-94184"
  ],
  "description": "Christian Herdtweck discovered that Fetchmail incorrectly handled certain\nlong log messages. A remote attacker could possibly use this issue to cause\nFetchmail to crash, resulting in a denial of service. This issue only\naffected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2021-36386)\n\nIt was discovered that the Fetchmail SMTP client incorrectly handled\ncertain status code messages. An attacker controlling a malicious server\ncould possibly use this issue to cause Fetchmail to crash, resulting in a\ndenial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, and Ubuntu 20.04 LTS. (CVE-2025-61962)\n\nTristan Madani discovered that Fetchmail incorrectly handled certain NTLM\nauthentication challenges. A remote attacker could possibly use this issue\nto cause Fetchmail to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. The default compiler options for affected releases\nshould reduce the vulnerability to a denial of service. (CVE-2026-94184)",
  "id": "USN-9013-1",
  "isummary": "Several security issues were fixed in Fetchmail.",
  "releases": {
    "bionic": {
      "allbinaries": {
        "fetchmail": {
          "pocket": "esm-infra",
          "source": "fetchmail",
          "version": "6.3.26-3ubuntu0.1~18.04.1+esm1"
        },
        "fetchmailconf": {
          "pocket": "esm-infra",
          "source": "fetchmail",
          "version": "6.3.26-3ubuntu0.1~18.04.1+esm1"
        }
      },
      "binaries": {
        "fetchmail": {
          "pocket": "esm-infra",
          "version": "6.3.26-3ubuntu0.1~18.04.1+esm1"
        }
      },
      "sources": {
        "fetchmail": {
          "description": "SSL enabled POP3, APOP, IMAP mail gatherer/forwarder",
          "version": "6.3.26-3ubuntu0.1~18.04.1+esm1"
        }
      }
    },
    "focal": {
      "allbinaries": {
        "fetchmail": {
          "pocket": "esm-infra",
          "source": "fetchmail",
          "version": "6.4.2-2ubuntu0.1~esm1"
        }
      },
      "binaries": {
        "fetchmail": {
          "pocket": "esm-infra",
          "version": "6.4.2-2ubuntu0.1~esm1"
        }
      },
      "sources": {
        "fetchmail": {
          "description": "SSL enabled POP3, APOP, IMAP mail gatherer/forwarder",
          "version": "6.4.2-2ubuntu0.1~esm1"
        }
      }
    },
    "jammy": {
      "allbinaries": {
        "fetchmail": {
          "pocket": "security",
          "source": "fetchmail",
          "version": "6.4.27-1ubuntu0.2"
        }
      },
      "archs": {
        "amd64": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2_amd64.deb": {
              "md5": "a4d91946659ed81241fec55218aea917",
              "size": 383542
            }
          }
        },
        "arm64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2_arm64.deb": {
              "md5": "e9dbf89900f730939507f368217e75f6",
              "size": 381136
            }
          }
        },
        "armhf": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2_armhf.deb": {
              "md5": "b7d88aaaf8fdb76f1f2d4a51fd230d11",
              "size": 378216
            }
          }
        },
        "ppc64el": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2_ppc64el.deb": {
              "md5": "94a261b36a2362f8c14fbdb57c20aa40",
              "size": 404634
            }
          }
        },
        "riscv64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2_riscv64.deb": {
              "md5": "f307d7235cdff857f0ee9529f2aeab4d",
              "size": 379708
            }
          }
        },
        "s390x": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2_s390x.deb": {
              "md5": "0735902ae2de0237df9ac2b643089539",
              "size": 383086
            }
          }
        },
        "source": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2.debian.tar.xz": {
              "md5": "43547afa8012df61ce0d98a3b35dedb2",
              "size": 56328
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.27-1ubuntu0.2.dsc": {
              "md5": "cb12f28688880071cf079ece79e0b560",
              "size": 2323
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.27.orig.tar.xz": {
              "md5": "fbeab300ed54b973066d651132e80592",
              "size": 1326668
            }
          }
        }
      },
      "binaries": {
        "fetchmail": {
          "pocket": "security",
          "version": "6.4.27-1ubuntu0.2"
        }
      },
      "sources": {
        "fetchmail": {
          "description": "SSL enabled POP3, APOP, IMAP mail gatherer/forwarder",
          "version": "6.4.27-1ubuntu0.2"
        }
      }
    },
    "noble": {
      "allbinaries": {
        "fetchmail": {
          "pocket": "security",
          "source": "fetchmail",
          "version": "6.4.38-1ubuntu4.2"
        }
      },
      "archs": {
        "amd64": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2_amd64.deb": {
              "md5": "fffea254a04bf7c06b29897319fddc19",
              "size": 383544
            }
          }
        },
        "arm64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2_arm64.deb": {
              "md5": "e1bc63e7dea1dc3baa75d1fa05c35432",
              "size": 380522
            }
          }
        },
        "armhf": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2_armhf.deb": {
              "md5": "9b2451c940fd4412800bd439887660e5",
              "size": 377086
            }
          }
        },
        "ppc64el": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2_ppc64el.deb": {
              "md5": "8175a111f5f070c9e9aa0c9e1e57408b",
              "size": 410438
            }
          }
        },
        "riscv64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2_riscv64.deb": {
              "md5": "92d293e2d2062fd524e119d3de25f9df",
              "size": 392960
            }
          }
        },
        "s390x": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2_s390x.deb": {
              "md5": "af35c9e3a8673046cb2e32ac13146bf8",
              "size": 393474
            }
          }
        },
        "source": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2.debian.tar.xz": {
              "md5": "bdf8d4407200014ec2e9427118c755dc",
              "size": 56808
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.38-1ubuntu4.2.dsc": {
              "md5": "bfe9cfe237464fc3e7eec4fa721f982b",
              "size": 2074
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.4.38.orig.tar.xz": {
              "md5": "0b833211c628f18607b82ae9add97c40",
              "size": 1220892
            }
          }
        }
      },
      "binaries": {
        "fetchmail": {
          "pocket": "security",
          "version": "6.4.38-1ubuntu4.2"
        }
      },
      "sources": {
        "fetchmail": {
          "description": "SSL enabled POP3, APOP, IMAP mail gatherer/forwarder",
          "version": "6.4.38-1ubuntu4.2"
        }
      }
    },
    "resolute": {
      "allbinaries": {
        "fetchmail": {
          "pocket": "security",
          "source": "fetchmail",
          "version": "6.6.2-2ubuntu0.1"
        }
      },
      "archs": {
        "amd64": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1_amd64.deb": {
              "md5": "250c07137aee1f7ad3c8fb42367f2baf",
              "size": 402202
            }
          }
        },
        "amd64v3": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1_amd64v3.deb": {
              "md5": "1acd598f0267909786cdcb11e88a735c",
              "size": 402964
            }
          }
        },
        "arm64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1_arm64.deb": {
              "md5": "73fba53bf1213b62a7949c6b8097f5ce",
              "size": 399046
            }
          }
        },
        "armhf": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1_armhf.deb": {
              "md5": "9117830fa7436c327dc2c80454903e46",
              "size": 395192
            }
          }
        },
        "ppc64el": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1_ppc64el.deb": {
              "md5": "678db1a2dbfc4fc976436cd837361e3a",
              "size": 431618
            }
          }
        },
        "riscv64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1_riscv64.deb": {
              "md5": "74a4447e320dbbcdb0d5da755f395f24",
              "size": 414078
            }
          }
        },
        "s390x": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1_s390x.deb": {
              "md5": "1fb24a9501686731021b3b1d39b73bba",
              "size": 411314
            }
          }
        },
        "source": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1.debian.tar.xz": {
              "md5": "55d303c1682fda8260137a7172a50b55",
              "size": 55208
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.2-2ubuntu0.1.dsc": {
              "md5": "9dcdd9e4a524f510a52c5f44ab8683c4",
              "size": 2322
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.2.orig.tar.xz": {
              "md5": "a384f9b10da529a1435e76a53907f271",
              "size": 1091032
            }
          }
        }
      },
      "binaries": {
        "fetchmail": {
          "pocket": "security",
          "version": "6.6.2-2ubuntu0.1"
        }
      },
      "sources": {
        "fetchmail": {
          "description": "SSL enabled POP3, APOP, IMAP mail gatherer/forwarder",
          "version": "6.6.2-2ubuntu0.1"
        }
      }
    },
    "stonking": {
      "allbinaries": {
        "fetchmail": {
          "pocket": "security",
          "source": "fetchmail",
          "version": "6.6.6-1ubuntu0.1"
        }
      },
      "archs": {
        "amd64": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1_amd64.deb": {
              "md5": "129c2f8ff10e7f99e726cf7bf75ac53b",
              "size": 401702
            }
          }
        },
        "amd64v3": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1_amd64v3.deb": {
              "md5": "d0748c99c44cd634fc452c3fe0bb15dc",
              "size": 402392
            }
          }
        },
        "arm64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1_arm64.deb": {
              "md5": "ea46f372e4fa11a9e78b7d362cde0e43",
              "size": 398348
            }
          }
        },
        "armhf": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1_armhf.deb": {
              "md5": "49c31c9a2b6ccf16c509f3bff943657c",
              "size": 394544
            }
          }
        },
        "ppc64el": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1_ppc64el.deb": {
              "md5": "533870affbe18679ded6432f24765ae0",
              "size": 430358
            }
          }
        },
        "riscv64": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1_riscv64.deb": {
              "md5": "03f9c7284711e824b36d21b5487d32a0",
              "size": 413258
            }
          }
        },
        "s390x": {
          "urls": {
            "http://ports.ubuntu.com/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1_s390x.deb": {
              "md5": "229385e7dbfbb069705fef0dbf517f63",
              "size": 410856
            }
          }
        },
        "source": {
          "urls": {
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1.debian.tar.xz": {
              "md5": "3f3f3636e871ea69f45e4d3112b8bddf",
              "size": 52908
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.6-1ubuntu0.1.dsc": {
              "md5": "cd8cbb1118b0f2d97ddbc135b35492e6",
              "size": 2336
            },
            "http://security.ubuntu.com/ubuntu/pool/main/f/fetchmail/fetchmail_6.6.6.orig.tar.xz": {
              "md5": "9c8724813d1986a1be4e653fe69fa01c",
              "size": 1086000
            }
          }
        }
      },
      "binaries": {
        "fetchmail": {
          "pocket": "security",
          "version": "6.6.6-1ubuntu0.1"
        }
      },
      "sources": {
        "fetchmail": {
          "description": "SSL enabled POP3, APOP, IMAP mail gatherer/forwarder",
          "version": "6.6.6-1ubuntu0.1"
        }
      }
    },
    "xenial": {
      "allbinaries": {
        "fetchmail": {
          "pocket": "esm-infra-legacy",
          "source": "fetchmail",
          "version": "6.3.26-2ubuntu0.1~esm1"
        },
        "fetchmailconf": {
          "pocket": "esm-infra-legacy",
          "source": "fetchmail",
          "version": "6.3.26-2ubuntu0.1~esm1"
        }
      },
      "binaries": {
        "fetchmail": {
          "pocket": "esm-infra-legacy",
          "version": "6.3.26-2ubuntu0.1~esm1"
        }
      },
      "sources": {
        "fetchmail": {
          "description": "SSL enabled POP3, APOP, IMAP mail gatherer/forwarder",
          "version": "6.3.26-2ubuntu0.1~esm1"
        }
      }
    }
  },
  "summary": "fetchmail vulnerabilities",
  "timestamp": 1794244675.598548,
  "title": "Fetchmail vulnerabilities"
}