FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

msmtp -- certificate-verification issue

Affected packages
1.8.1 < msmtp < 1.8.3

Details

VuXML ID f0416fb5-3130-11e9-a5ba-e0d55e883e26
Discovery 2019-02-11
Entry 2019-02-15

msmtp developers report:

In msmtp 1.8.2, when tls_trust_file has its default configuration, certificate-verification results are not properly checked.

[source]

References

CVE Name CVE-2019-8337
URL https://marlam.de/msmtp/news/msmtp-1-8-3/

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.