Package(s):	fetchmail	CVE #(s):	CVE-2009-2666
Created:	August 6, 2009	Updated:	June 2, 2010
Description:	From the slackware alert: This update fixes an SSL NUL prefix impersonation attack through NULs in a part of a X.509 certificate's CommonName and subjectAltName fields.
Alerts:	Gentoo 201006-12 fetchmail 2010-06-01 Mandriva MDVSA-2009:201-1 fetchmail 2009-12-04 CentOS CESA-2009:1427 fetchmail 2009-09-08 Red Hat RHSA-2009:1427-01 fetchmail 2009-09-08 Fedora FEDORA-2009-8780 fetchmail 2009-08-20 Fedora FEDORA-2009-8770 fetchmail 2009-08-20 Ubuntu USN-816-1 fetchmail 2009-08-12 Mandriva MDVSA-2009:201 fetchmail 2009-08-12 Debian DSA-1852-1 fetchmail 2009-08-07 Slackware SSA:2009-218-01 fetchmail 2009-08-06 CentOS CESA-2009:1427 fetchmail 2009-10-30

---

to post comments