Re: The 6.6.7.rc1 release candidate is available (security fix for NTLM protocol, possible RCE)
Matthias Andree via Fetchmail-users <[email protected]> Tue, 14 Jul 2026 00:34:17 +0200
| Newsgroups | gmane.mail.fetchmail.user |
|---|---|
| Message-ID | <[email protected]> |
CkFtIDEzLjA3LjI2IHVtIDIxOjQ5IHNjaHJpZWIgQW5kcmV3IEMgQWl0Y2hpc29uOgo+IE9uIE1v biwgMTMgSnVsIDIwMjYsIE5vcm1hbiBSYW1zZXkgd3JvdGU6Cj4KPj4gPiBUaGUgNi42LjcucmMx IHJlbGVhc2UgY2FuZGlkYXRlIG9mIGZldGNobWFpbCB0aWdodGVucyBjb2RlCj4+ID4gYXJvdW5k IGEgc2VjdXJpdHkgdnVsbmVyYWJpbGl0eSBpbiB0aGUgTlRMTSBjb2RlLgo+PiA+IEl0IGlzIG5v dyBhdmFpbGFibGUgYXQgdGhlIHVzdWFsIGxvY2F0aW9ucywgaW5jbHVkaW5nCj4+ID4gPGh0dHBz Oi8vZG93bmxvYWRzLnNvdXJjZWZvcmdlLm5ldC9wcm9qZWN0L2ZldGNobWFpbC9icmFuY2hfNi42 Lz4uCj4+Cj4+IEJ1aWxkaW5nIG9uIERlYmlhbiBzdGFibGUsIEknbSBydW5uaW5nIGludG8gdGhp cyBidWlsZCBpc3N1ZSwgd2hpY2ggaXMKPj4gbm90IGFkZHJlc3NlZCBpbiB0aGUgRkFROgo+Pgo+ PiDCoMKgIG5yQGhvbWVkb2cgfi9uL2ZldGNobWFpbD4gbWFrZSBjaGVjawo+PiDCoMKgIENEUEFU SD0iJHtaU0hfVkVSU0lPTisufToiICYmIGNkIC4gJiYgL2Jpbi9zaCAKPj4gL2hvbWUvbnIvbmV0 L2ZldGNobWFpbC9taXNzaW5nIGFjbG9jYWwtMS4xNCAtSSBtNCAtSSBtNC1sb2NhbAo+PiDCoMKg IC9ob21lL25yL25ldC9mZXRjaG1haWwvbWlzc2luZzogODE6IGFjbG9jYWwtMS4xNDogbm90IGZv dW5kCj4+IMKgwqAgV0FSTklORzogJ2FjbG9jYWwtMS4xNCcgaXMgbWlzc2luZyBvbiB5b3VyIHN5 c3RlbS4KPj4gwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBZb3Ugc2hvdWxkIG9ubHkgbmVlZCBpdCBp ZiB5b3UgbW9kaWZpZWQgJ2FjaW5jbHVkZS5tNCcgb3IKPj4gwqDCoMKgwqDCoMKgwqDCoMKgwqDC oCAnY29uZmlndXJlLmFjJyBvciBtNCBmaWxlcyBpbmNsdWRlZCBieSAnY29uZmlndXJlLmFjJy4K Pj4gwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBUaGUgJ2FjbG9jYWwnIHByb2dyYW0gaXMgcGFydCBv ZiB0aGUgR05VIEF1dG9tYWtlIHBhY2thZ2U6Cj4+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPGh0 dHA6Ly93d3cuZ251Lm9yZy9zb2Z0d2FyZS9hdXRvbWFrZT4KPj4gwqDCoMKgwqDCoMKgwqDCoMKg wqDCoCBJdCBhbHNvIHJlcXVpcmVzIEdOVSBBdXRvY29uZiwgR05VIG00IGFuZCBQZXJsIGluIG9y ZGVyIAo+PiB0byBydW46Cj4+IMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPGh0dHA6Ly93d3cuZ251 Lm9yZy9zb2Z0d2FyZS9hdXRvY29uZj4KPj4gwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA8aHR0cDov L3d3dy5nbnUub3JnL3NvZnR3YXJlL200Lz4KPj4gwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA8aHR0 cDovL3d3dy5wZXJsLm9yZy8+Cj4+IMKgwqAgbWFrZTogKioqIFtNYWtlZmlsZTo4OTM6IGFjbG9j YWwubTRdIEVycm9yIDEyNwo+PiDCoMKgIG5yQGhvbWVkb2cgfi9uL2ZldGNobWFpbCBbMl0+IGwg L3Vzci9iaW4vYWNsb2NhbCoKPj4gwqDCoCAvdXNyL2Jpbi9hY2xvY2FsQMKgIC91c3IvYmluL2Fj bG9jYWwtMS4xNSogL3Vzci9iaW4vYWNsb2NhbC0xLjE3Kgo+Pgo+PiBJIGRpZCBub3QgbW9kaWZ5 IHRoZSBmaWxlcyB0aGF0IGFyZSBtZW50aW9uZWQuCj4+Cj4+IFJ1bm5pbmcgYG1ha2UgaW5zdGFs bGAgaXMgYWxzbyBibG9ja2VkIGJ5IHRoaXMgZXJyb3IuCj4+Cj4+IEkgY2FuIGdsb2JhbGx5IHJl cGxhY2UgYWNsb2NhbC0xLjE0IHdpdGggYWNsb2NhbCAxLjE1LCBidXQgaWYgdGhlCj4+IE1ha2Vm aWxlIGlzIGxvb2tpbmcgZm9yIHN1Y2ggYSBzcGVjaWZpYyB2ZXJzaW9uLCBwZXJoYXBzIEkgc2hv dWxkIG5vdAo+PiB0aW5rZXIgd2l0aCB0aGluZ3MgSSBkb24ndCB1bmRlcnN0YW5kLgo+Pgo+PiBQ bGVhc2UgYWR2aXNlIG1lIGhvdyB0byBwcm9jZWVkLgo+Cj4gSSB0aGluawo+IMKgwqDCoMKgwqDC oMKgIHJtIE1ha2VmaWxlIDsgY29uZmlndXJlCj4gc2hvdWxkIGJlIHN1ZmZpY2llbnQuIEFkZCB3 aGF0ZXZlciBjb25maWd1cmUgb3B0aW9ucyB5b3UgdXN1YWxseSB1c2UuCj4KPiBJZiBub3QsIHlv dSBtYXkgbmVlZCB0byBydW4KPiDCoMKgwqDCoMKgwqDCoCBybSBNYWtlZmlsZS5pbiA7IGF1dG9t YWtlCj4gYW5kIHRoZW4gdGhlbiBhYm92ZQo+IMKgwqDCoMKgwqDCoMKgIHJtIE1ha2VmaWxlIDsg Y29uZmlndXJlCj4gYWdhaW4uCj4KPiBJdCBsb29rcyBsaWtlIHlvdXIgYXV0b21ha2UgaGFzIGJl ZW4gdXBkYXRlZCBzaW5jZSB5b3UgbGFzdCBidWlsdCAKPiBmZXRjaG1haWwsCj4gc28gcmVtb3Zp bmcgY29uZmlnLnN0YXR1cyBhbmQvb3Igb3IgYXV0b200dGUuY2FjaGUvCj4gKm1pZ2h0KiBiZSBh cHByb3ByaWF0ZSB0b28uCgpOb3JtYW4gcmVwb3J0ZWQgTk9UIGhhdmluZyBkb25lIHNvLsKgIEkg aGF2ZSB0ZXN0IGJ1aWx0IHRoZSBmcmVzaGx5IApkb3dubG9hZGVkIGFuZCB1bnBhY2tnZWQgdGFy YmFsbCBpbiBhIGZyZXNobHkgcHVsbGVkIGRlYmlhbjpzdGFibGUgCmNvbnRhaW5lciB3aGVyZSBJ IGluc3RhbGxlZCBidWlsZC1lc3NlbnRpYWwgbWFrZSBsaWJzc2wtZGV2LCBubyBzdWNoIApvYnNl cnZhdGlvbi4KClRoZSB1c3VhbCBjYXVzZSB0aGF0IHRoZSBhdXRvY29uZi9hdXRvbWFrZS9nZXR0 ZXh0IHN0dWZmIHdhbnRzIHRvIHVwZGF0ZSAKaXRzIGZpbGVzIGlzIHRoYXQgdGltZXN0YW1wcyBn b3QgbWVzc2VkIHVwLCBvciB0aGF0IHRoZSBjb21wdXRlciB0aW1lIGlzIAp3YXkgYmVoaW5kLgpU aGlzIG1pZ2h0IGhhcHBlbiBvbiB0aW55IGNvbXB1dGVycyB3aXRob3V0IHJlYWwtdGltZSBjbG9j ayBpZiB0aGV5IGZhaWwgCnRvIHN5bmNocm9uaXplIHVwb24gYm9vdC4KCklmIHRoZSBjb21wdXRl ciBzbGVwdCBmb3IgbG9uZyBlbm91Z2ggaW4gc3VzcGVuZCBtb2RlIHNvIHRoZSBjbG9jayBpcyAK YmVoaW5kLCBvciBhIGNvbXB1dGVyIHdpdGhvdXQgb3Igd2l0aCBicm9rZW4vdW5zZXQvd3Jvbmds eSBzZXQgUlRDIGJvb3RzIAp1cCBhbmQgY2FuJ3QgZ2V0IHRoZSB0aW1lIGZyb20gdGhlIG5ldHdv cmsgZHVyaW5nIGJvb3QsIGl0IGNhbiBoYXBwZW4gCnRoYXQgdGhlIHRhcmJhbGwgaXMgImluIHRo ZSBmdXR1cmUiIGZyb20gdGhlIHBlcnNwZWN0aXZlIG9mIHRoZSBjb21wdXRlciAKdGhhdCBidWls dCB0aGUgdGFyYmFsbCAobWluZSksIGNvbmZ1c2lvbiBlbnN1ZXMuCgpOb3csIGFzIGEgcmVzdWx0 IG9mIGFuIG92ZXJzaWdodCBpbiB0aGUgYnVpbGQgc2NyaXB0cywgSSBleHBvcnQgClRBUl9PUFRJ T05TIHdpdGggYW4gZW1wdHkgLS1tdGltZT0gYXJndW1lbnQgd2hpY2ggbWVhbnMgYWxsIGZpbGVz IGdldCAKInN0YXJ0IG9mIHRvZGF5IiBkYXRlIChtaWRuaWdodCBpbiB0aGUgbG9jYWwgdGltZXpv bmUpLiBUaGlzIGRvZXMgd29yayAKaW4gbXkgdGVzdGluZyBvbiBEZWJpYW4gc3RhYmxlIHdpdGhv dXQgZm9yY2luZyByZWJ1aWxkcyBvZiBhdXRvbWFrZSBldGMuCgpIVEgKCgoKX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRmV0Y2htYWlsLXVzZXJzIG1haWxp bmcgbGlzdApGZXRjaG1haWwtdXNlcnNAbGlzdHMuc291cmNlZm9yZ2UubmV0Cmh0dHBzOi8vbGlz dHMuc291cmNlZm9yZ2UubmV0L2xpc3RzL2xpc3RpbmZvL2ZldGNobWFpbC11c2Vycwo=