http://bugzilla.suse.com/show_bug.cgi?id=1125420 Bug ID: 1125420 Summary: VUL-0: CVE-2019-8337: msmtp: certificate-verification results are not properly checked in tls_trust_file default configuration Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mrueckert@suse.com Reporter: rfrohl@suse.com QA Contact: security-team@suse.de Found By: --- Blocker: --- CVE-2019-8337 In msmtp 1.8.2, when tls_trust_file has its default configuration, certificate-verification results are not properly checked. References: https://nvd.nist.gov/vuln/detail/CVE-2019-8337 https://marlam.de/msmtp/news/ -- You are receiving this mail because: You are on the CC list for the bug.