[ALSA-2026:85959] Moderate: fetchmail security update
Type:
security
Severity:
moderate
Release date:
2026-10-21
Description:
Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet (POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC) for retrieval. Then Fetchmail forwards the mail through SMTP so the user can read it through their favorite mail client. Security Fix(es): * fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) (CVE-2026-94184) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 fetchmail-6.4.38-3.el10_2.1.aarch64.rpm 18085533f99f5a6007f984e9876e7ee562fdf50c590554c23000fff14b6886eb
ppc64le fetchmail-6.4.38-3.el10_2.1.ppc64le.rpm 24eb63390a65712d7fcaa175401ee69efa373af7b2ad53e964d719746b4f4c9f
s390x fetchmail-6.4.38-3.el10_2.1.s390x.rpm fb703bf6dcffdb2981c5cdbc3097895401300ed2cd07b4f655d36c56b5b20d5d
x86_64 fetchmail-6.4.38-3.el10_2.1.x86_64.rpm 7a2ab18cd6e67e8314fd423a57e921d23bcd863289fbce8cb0c3173d80da2749
x86_64_v2 fetchmail-6.4.38-3.el10_2.1.x86_64_v2.rpm bb452c6515d4cabf0b9830fa8acde373b88b30715ab4a3181b3304c0cc1076a9
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.