Re: The 6.6.7.rc1 release candidate is available (security fix for NTLM protocol, possible RCE)
Matthias Andree via Fetchmail-users <[email protected]> Tue, 14 Jul 2026 21:32:12 +0200
| Newsgroups | gmane.mail.fetchmail.user |
|---|---|
| Message-ID | <[email protected]> |
CkFtIDE0LjA3LjI2IHVtIDIwOjQ0IHNjaHJpZWIgTm9ybWFuIFJhbXNleToKPiAgID4gT24gTW9u LCAxMyBKdWwgMjAyNiwgTm9ybWFuIFJhbXNleSB3cm90ZToKPiAgID4KPiAgID4gPiBCdWlsZGlu ZyBvbiBEZWJpYW4gc3RhYmxlLCBJJ20gcnVubmluZyBpbnRvIHRoaXMgYnVpbGQgaXNzdWUuLi4K PiAgID4gPgo+ICAgPiA+IFBsZWFzZSBhZHZpc2UgbWUgaG93IHRvIHByb2NlZWQuCj4gICA+Cj4g ICA+IEkgdGhpbmsKPiAgID4gICAgICAgICAgcm0gTWFrZWZpbGUgOyBjb25maWd1cmUKPiAgID4g c2hvdWxkIGJlIHN1ZmZpY2llbnQuIEFkZCB3aGF0ZXZlciBjb25maWd1cmUgb3B0aW9ucyB5b3Ug dXN1YWxseSB1c2UuCj4KPiBUaGlzIHdhcyBzdWZmaWNpZW50OyB0aGFuayB5b3UuCj4KPiAoQW5k IGluIHRoZSBldmVudCwgdGhlIHN5c3RlbSBjbG9jayBpcyBmaW5lLCBhbmQgdGhlIGZpbGVzeXN0 ZW0gaXMgZXh0NC4pCgpOb3JtYW4sCgpHbGFkIHlvdSd2ZSBnb3QgdGhhdCBzb2x2ZWQgd2l0aCBB bmRyZXcncyBoZWxwOwppZiB5b3UgaGF2ZSBhbm90aGVyIGZldyBtaW51dGVzOiB3b3VsZCB5b3Ug aGFwcGVuIHRvIGhhdmUgYW55IGlkZWEgb3IgCmV2ZW4gcmVtb3RlIGh1bmNoIGhvdyB0aGUgc2l0 dWF0aW9uIGNhbWUgdG8gcGFzcyB0aGVuIHNvIEkgY291bGQgdHJ5IHRvIAphdm9pZCB0aGF0IGZy b20gdGhlIHBhY2thZ2luZyBlbmQ/CgpIb3cgZGlkIHlvdSB1bnBhY2sgdGhlIHRhcmJhbGw/IFdh cyB0aGF0ICJ0YXIiIG9uIHRoZSBjb21tYW5kIGxpbmUgb3IgCnNvbWUgZ3JhcGhpY2FsIHV0aWxp dHk/IFdoaWNoLCBpbiB3aGljaCB2ZXJzaW9uPwoKRGlkIHlvdSB1bnBhY2sgc291cmNlIHRhcmJh bGxzIG9mIGRpZmZlcmVudCB2ZXJzaW9ucyBvdmVyIG9uZSBhbm90aGVyIAphbmQvb3IgbWl4IHdp dGggR2l0IGNoZWNrb3V0cywgb3IgbWl4IG1lc29uIGFuZCBhdXRvdG9vbHMgYnVpbGRzPwoKSW4g YXR0ZW1wdGluZyB0byB1bmRlcnN0YW5kIHlvdXIgc2l0dWF0aW9uLCBJIGZvdW5kIGEgZmV3IGVk Z2UgY2FzZXMgaW4gCnRoZSBwYWNrYWdpbmcgdGhhdCBJIHdhbnQgdG8gaXJvbiBvdXQgZm9yIDYu Ni43LnJjMi9yZWxlYXNlIGxhdGVyLgoKVGhlIGZpbGVzIHdlcmUgY3JlYXRlZCBpbiBDRVNUIHRp bWUgem9uZSAoMiBob3VycyBhaGVhZC9lYXN0IG9mIApVVEMvIkdNVCIpIHNvbWV3aGVuIG9uIDIw MjYtMDYtMjcsIHdpdGggYSBmb3JnZWQgZGF0ZSBiYWNrIHRvIG1pZG5pZ2h0IApvZiBiZWdpbm5p bmcgdGhhdCBzYW1lIGRheSwgYW5kIGluIFVUQyBkaXNwbGF5IHRoYXQgbWFrZXMgaXQgCjIwMjYt MDYtMjZUMjI6MDA6MDAgc2hhcnA7IEkndmUgcGFja2FnZWQgZnJvbSBidHJmcyB3aXRoIEdOVSB0 YXIgMS4zNS4gCkFueXRoaW5nIHlvdSB3b3VsZCBoYXZlIHVucGFja2VkIHdvdWxkIGJlIG5ld2Vy LiBUaGUgdGFyYmFsbCBjb250YWlucyAKdGhlIGZpbGVzIHdpdGggdGhlIHNhbWUgdGltZXN0YW1w IGluIGxleGljb2dyYXBoaWNhbCBvcmRlci4KCj4gJCBUWj1VVEMgdGFyIC10SnZmIH4vRG93bmxv YWRzL2ZldGNobWFpbC02LjYuNy5yYzEudGFyLnh6IC0tZnVsbC10aW1lIAo+IHwgZ3JlcCAtRSBN YWtlZmlsZVx8Y29uZmlnXHxtNAo+IC1ydy1yLS1yLS0gcm9vdC9yb290wqAgwqAgwqAgODc4NSAy MDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02LjYuNy5yYzEvTWFrZWZpbGUuYW0KPiAt cnctci0tci0tIHJvb3Qvcm9vdMKgIMKgIDExMDkxNSAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZl dGNobWFpbC02LjYuNy5yYzEvTWFrZWZpbGUuaW4KPiAtcnctci0tci0tIHJvb3Qvcm9vdMKgIMKg IMKgNzk1ODQgMjAyNi0wNi0yNiAyMjowMDowMCAKPiBmZXRjaG1haWwtNi42LjcucmMxL2FjbG9j YWwubTQKPiAtcnd4ci14ci14IHJvb3Qvcm9vdMKgIMKgIMKgNTA4NTMgMjAyNi0wNi0yNiAyMjow MDowMCAKPiBmZXRjaG1haWwtNi42LjcucmMxL2NvbmZpZy5ndWVzcwo+IC1ydy1yLS1yLS0gcm9v dC9yb290wqAgwqAgwqAxMTE0MyAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02LjYu Ny5yYzEvY29uZmlnLmguaW4KPiAtcnd4ci14ci14IHJvb3Qvcm9vdMKgIMKgIMKgMjAxOTYgMjAy Ni0wNi0yNiAyMjowMDowMCAKPiBmZXRjaG1haWwtNi42LjcucmMxL2NvbmZpZy5ycGF0aAo+IC1y d3hyLXhyLXggcm9vdC9yb290wqAgwqAgwqAzOTk0NiAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZl dGNobWFpbC02LjYuNy5yYzEvY29uZmlnLnN1Ygo+IC1yd3hyLXhyLXggcm9vdC9yb290wqAgwqAg NTAwOTEyIDIwMjYtMDYtMjYgMjI6MDA6MDAgCj4gZmV0Y2htYWlsLTYuNi43LnJjMS9jb25maWd1 cmUKPiAtcnctci0tci0tIHJvb3Qvcm9vdMKgIMKgIMKgMjk2OTggMjAyNi0wNi0yNiAyMjowMDow MCAKPiBmZXRjaG1haWwtNi42LjcucmMxL2NvbmZpZ3VyZS5hYwo+IGRyd3hyLXhyLXggcm9vdC9y b290wqAgwqAgwqAgwqAgwqAwIDIwMjYtMDYtMjYgMjI6MDA6MDAgZmV0Y2htYWlsLTYuNi43LnJj MS9tNC8KPiAtcnctci0tci0tIHJvb3Qvcm9vdMKgIMKgIMKgIDkyNDIgMjAyNi0wNi0yNiAyMjow MDowMCAKPiBmZXRjaG1haWwtNi42LjcucmMxL200L2J1aWxkLXRvLWhvc3QubTQKPiAtcnctci0t ci0tIHJvb3Qvcm9vdMKgIMKgIMKgMTQ5OTAgMjAyNi0wNi0yNiAyMjowMDowMCAKPiBmZXRjaG1h aWwtNi42LjcucmMxL200L2dldHRleHQubTQKPiAtcnctci0tci0tIHJvb3Qvcm9vdMKgIMKgIMKg MTcxOTQgMjAyNi0wNi0yNiAyMjowMDowMCAKPiBmZXRjaG1haWwtNi42LjcucmMxL200L2hvc3Qt Y3B1LWMtYWJpLm00Cj4gLXJ3LXItLXItLSByb290L3Jvb3TCoCDCoCDCoDExMDUyIDIwMjYtMDYt MjYgMjI6MDA6MDAgCj4gZmV0Y2htYWlsLTYuNi43LnJjMS9tNC9pY29udi5tNAo+IC1ydy1yLS1y LS0gcm9vdC9yb290wqAgwqAgwqAgMzU2MCAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFp bC02LjYuNy5yYzEvbTQvaW50bG1hY29zeC5tNAo+IC1ydy1yLS1yLS0gcm9vdC9yb290wqAgwqAg wqAgNTQ0MCAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02LjYuNy5yYzEvbTQvbGli LWxkLm00Cj4gLXJ3LXItLXItLSByb290L3Jvb3TCoCDCoCDCoDM1Nzk2IDIwMjYtMDYtMjYgMjI6 MDA6MDAgCj4gZmV0Y2htYWlsLTYuNi43LnJjMS9tNC9saWItbGluay5tNAo+IC1ydy1yLS1yLS0g cm9vdC9yb290wqAgwqAgwqAxMjU4MiAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02 LjYuNy5yYzEvbTQvbGliLXByZWZpeC5tNAo+IC1ydy1yLS1yLS0gcm9vdC9yb290wqAgwqAgwqAg MTIzNiAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02LjYuNy5yYzEvbTQvbmxzLm00 Cj4gLXJ3LXItLXItLSByb290L3Jvb3TCoCDCoCDCoDE5MDEzIDIwMjYtMDYtMjYgMjI6MDA6MDAg Cj4gZmV0Y2htYWlsLTYuNi43LnJjMS9tNC9wby5tNAo+IC1ydy1yLS1yLS0gcm9vdC9yb290wqAg wqAgwqAgMzA5MSAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02LjYuNy5yYzEvbTQv cHJvZ3Rlc3QubTQKPiBkcnd4ci14ci14IHJvb3Qvcm9vdMKgIMKgIMKgIMKgIMKgMCAyMDI2LTA2 LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02LjYuNy5yYzEvbTQtbG9jYWwvCj4gLXJ3LXJ3LXIt LSByb290L3Jvb3TCoCDCoCDCoCAyOTY4IDIwMjYtMDYtMjYgMjI6MDA6MDAgCj4gZmV0Y2htYWls LTYuNi43LnJjMS9tNC1sb2NhbC9hYy1hcmNoaXZlLWxpY2Vuc2UudHh0Cj4gLXJ3LXItLXItLSBy b290L3Jvb3TCoCDCoCDCoCAzMjA3IDIwMjYtMDYtMjYgMjI6MDA6MDAgCj4gZmV0Y2htYWlsLTYu Ni43LnJjMS9tNC1sb2NhbC9hY19tYV9zZWFyY2hfcGFja2FnZS5tNAo+IC1ydy1yLS1yLS0gcm9v dC9yb290wqAgwqAgwqAyMDI1MCAyMDI2LTA2LTI2IDIyOjAwOjAwIAo+IGZldGNobWFpbC02LjYu Ny5yYzEvcG8vTWFrZWZpbGUuaW4uaW4KPiBbLi4uXQoKCgpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXwpGZXRjaG1haWwtdXNlcnMgbWFpbGluZyBsaXN0CkZl dGNobWFpbC11c2Vyc0BsaXN0cy5zb3VyY2Vmb3JnZS5uZXQKaHR0cHM6Ly9saXN0cy5zb3VyY2Vm b3JnZS5uZXQvbGlzdHMvbGlzdGluZm8vZmV0Y2htYWlsLXVzZXJzCg==