CVE-2021-39272: Fedoraproject Fedora

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only; version 35 only
• Fetchmail Fetchmail: before 6.4.22 (fixed in 6.4.22)

Published 2021-08-30. Last modified 2026-06-17.