aboutsummaryrefslogtreecommitdiffstats
path: root/fetchmail-SA-2021-02.txt
diff options
context:
space:
mode:
Diffstat (limited to 'fetchmail-SA-2021-02.txt')
-rw-r--r--fetchmail-SA-2021-02.txt5
1 files changed, 3 insertions, 2 deletions
diff --git a/fetchmail-SA-2021-02.txt b/fetchmail-SA-2021-02.txt
index b5a9905b..93397ec8 100644
--- a/fetchmail-SA-2021-02.txt
+++ b/fetchmail-SA-2021-02.txt
@@ -3,7 +3,7 @@ fetchmail-SA-2021-02: STARTTLS session encryption bypassing
Topics: fetchmail fails to enforce an encrypted connection
Author: Matthias Andree
-Version: 0.9
+Version: 0.9.1
Announced: 2021-08-26
Type: failure to enforce configured security policy
Impact: fetchmail continues an unencrypted connection,
@@ -22,7 +22,7 @@ Affects: - fetchmail releases up to and including 6.4.21
Not affected: - fetchmail releases 6.4.22 and newer
-Corrected in: 2021-08-26 fetchmail 6.4.22.rc1 release candidate
+Corrected in: 2021-08-27 fetchmail 6.4.22.rc2 release candidate
TBD fetchmail 6.4.22 release tarball
0. History of this announcement
@@ -34,6 +34,7 @@ Corrected in: 2021-08-26 fetchmail 6.4.22.rc1 release candidate
(see section 3b. below) to mitigate impact was sent to the
fetchmail mailing lists
2021-08-26 0.9 initial release along with fetchmail 6.4.22.rc1
+2021-08-26 0.9.1 update references to 6.4.22.rc2.
1. Background