You can subscribe to this list here.
2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
(1) |
Aug
(2) |
Sep
(4) |
Oct
(3) |
Nov
(4) |
Dec
(5) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2006 |
Jan
(6) |
Feb
|
Mar
(4) |
Apr
(3) |
May
(1) |
Jun
|
Jul
|
Aug
(2) |
Sep
(1) |
Oct
(2) |
Nov
(3) |
Dec
(1) |
2007 |
Jan
(4) |
Feb
(2) |
Mar
(4) |
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2008 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(5) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(3) |
Dec
|
2009 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(3) |
Jun
|
Jul
(1) |
Aug
(3) |
Sep
|
Oct
(3) |
Nov
|
Dec
|
2010 |
Jan
|
Feb
(4) |
Mar
(2) |
Apr
(2) |
May
(2) |
Jun
|
Jul
|
Aug
(1) |
Sep
(1) |
Oct
(2) |
Nov
|
Dec
(2) |
2011 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(3) |
Jun
(2) |
Jul
|
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
|
2012 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
(1) |
Oct
|
Nov
|
Dec
(2) |
2013 |
Jan
(1) |
Feb
|
Mar
(1) |
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
|
Oct
|
Nov
|
Dec
|
2014 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2019 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(3) |
Sep
(3) |
Oct
(1) |
Nov
|
Dec
|
2020 |
Jan
(2) |
Feb
(3) |
Mar
(3) |
Apr
(2) |
May
(3) |
Jun
(2) |
Jul
(3) |
Aug
(2) |
Sep
(1) |
Oct
(4) |
Nov
(1) |
Dec
|
2021 |
Jan
(4) |
Feb
(2) |
Mar
(3) |
Apr
(3) |
May
|
Jun
|
Jul
(2) |
Aug
(11) |
Sep
(3) |
Oct
(3) |
Nov
(4) |
Dec
(3) |
2022 |
Jan
|
Feb
(2) |
Mar
(2) |
Apr
(1) |
May
|
Jun
|
Jul
(3) |
Aug
(1) |
Sep
|
Oct
(2) |
Nov
|
Dec
|
2023 |
Jan
(3) |
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2024 |
Jan
(2) |
Feb
|
Mar
|
Apr
|
May
(1) |
Jun
|
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: Matthias A. <mat...@gm...> - 2006-01-05 00:48:50
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, in the original 6.3.0 announcement, I mentioned that we're more careful about writing the .fetchids file. While this is true, the change introduced a minor incompatibility. This announcement attempts to avoid astonishment throught that change. Beginning with release 6.3.0, fetchmail needs not only need write access to the idfile ($HOME/.fetchids), but also to the directory holding this file. fetchmail 6.2.X and older versions got away if just the idfile had write permission. The reason is that fetchmail 6.3.0 and newer now writes the ids to a temporary file, to avoid truncation of the idfile if running short of diskspace; a truncated idfile might lead to many duplicate messages, which might, in turn, aggravate the "low space" situation. For end users running fetchmail with default idfile on their own account, nothing changes: they have write access to their home directory. For system-wide execution of the script as used by some distributions (for instance Debian), it is now important that the idfile is in a directory writable by fetchmail, else creation of the temporary file and renaming into place will fail. Debian for instance places the idfile under /var/mail, this will no longer work with 6.3.0. I still think the new behavior is a step ahead, towards a more reliable fetchmail. Please accept my apologies for missing this in the 6.3.0/6.3.1 materials I provided to Rob Funk and that we shipped with fetchmail 6.3.0. Happy fetchmailing, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDvF7dvmGDOQUufZURAiknAKCFQxw6GWYmrvh2TW/qASnSA2n66QCfVrR/ IY+E3PqfFeWJW560g5IPDmQ= =uILr -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-12-22 00:44:24
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 fetchmail-SA-2005-03: security announcement Topics: #1 crash retrieving headerless message in multidrop mode #2 fetchmail 6.2.5.X end of life Author: Matthias Andree Version: 1.00 Announced: 2005-12-19 Type: null pointer dereference Impact: fetchmail crashes Danger: low Credits: Daniel Drake, Gentoo (bug report) Sunil Shetye (bug fix) CVE Name: CVE-2005-4348 URL: http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt http://article.gmane.org/gmane.mail.fetchmail.user/7573 http://bugs.debian.org/343836 Project URL: http://fetchmail.berlios.de/ Affects: fetchmail version 6.2.5.4 fetchmail version 6.3.0 Not affected: fetchmail 6.3.1 fetchmail 6.2.5.5 other versions not mentioned here or in the previous sections have not been checked Corrected: 2005-12-19 - released fetchmail 6.3.1 2005-12-18 - released fetchmail 6.3.1-rc1 2005-12-19 - released fetchmail 6.2.5.5 0. Release history ================== 2005-12-19 1.00 - initial version 1. Background ============= fetchmail is a software package to retrieve mail from remote POP2, POP3, IMAP, ETRN or ODMR servers and forward it to local SMTP, LMTP servers or message delivery agents. fetchmail ships with a graphical, Python/Tkinter based configuration utility named "fetchmailconf" to help the user create configuration (run control) files for fetchmail. 2. Problem description and Impact ================================= Fetchmail contains a bug that causes an application crash when fetchmail is configured for multidrop mode and the upstream mail server sends a message without headers. As fetchmail does not record this message as "previously fetched", it will crash with the same message if it is re-executed, so it cannot make progress. A malicious or broken-into upstream server could thus cause a denial of service in fetchmail clients. Note that such messages are not RFC-822 conformant, so if the server has not been tampered with, the server software is faulty. 3. Workaround ============= Where possible, singledrop mode may be an alternative. For sites, where multidrop mode is required, no workaround is known. 4. Solution =========== Download and install fetchmail 6.3.1 or a newer stable release from fetchmail's project site at <http://developer.berlios.de/project/showfiles.php?group_id=1824>. The fix has also been backported to the 6.2.5.5 legacy release which is available from the same site. Note however that 6.3.X has very few incompatible changes since 6.2.5.X so 6.3.X should be viable for most sites. It is therefore recommended that every user and distributor upgrade to 6.3.1 or newer. 5. End of life announcement =========================== The fetchmail 6.2.5.X branch will be discontinued early in 2006. The new 6.3.X stable branch has been available since 2005-11-30 and will not change except for bugfixes, documentation and translations. A. Copyright, License and Warranty ================================== (C) Copyright 2005 by Matthias Andree, <mat...@gm...>. Some rights reserved. This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs German License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc-nd/2.0/de/ or send a letter to Creative Commons; 559 Nathan Abbott Way; Stanford, California 94305; USA. THIS WORK IS PROVIDED FREE OF CHARGE AND WITHOUT ANY WARRANTIES. Use the information herein at your own risk. END OF fetchmail-SA-2005-03.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDqejWvmGDOQUufZURArTuAJ9/6xIB+DU4e0CAKNCGC3xE8pRzwwCeKLLT CtudIJhoxM7h/HBsPgpnetg= =pI3F -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-12-19 12:29:31
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I am announcing the release of fetchmail 6.3.1. This release fixes a denial of service bug/fetchmail crash in multidrop mode and several other annoyances, see below for a list of bugs fixed. This is a recommended upgrade for all users of any previous fetchmail versions. Distributors are sought to check opportunity to offer 6.3.1 as upgrade for 6.2.X or previous releases. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=8405> The SMTP/LMTP bug recently discussed on the fetchmail-devel mailing list remains unfixed, I preferred the quick security fix over delaying the release to have all fixes in. We still have the chance to a 6.3.2 release later :-) These are the relevant changes in 6.3.1 since 6.3.0: # DEPRECATED FEATURES AND MAJOR INCOMPATIBLE CHANGE ADVANCE WARNINGS * The MX and host alias DNS lookups that fetchmail performs in multidrop mode are obsolete, deprecated and may be removed from a future fetchmail version. They have never supported IPv6 (including IPv6-mapped IPv4) anyhow. (MA) * The monitor and interface options may be removed from a future fetchmail version as they are not sufficiently portable. (MA) * POP2 is obsolete. Support for POP2 may be removed from a future fetchmail version. (MA) * RPOP is obsolete, support may be removed from a future fetchmail release. (MA) * --sslcertck may become a default setting in a future fetchmail version. (MA) * The multidrop To/Cc guessing code along with the fragile duplicate suppressor is deprecated and may be removed from a future release. (MA) # SECURITY FIX IN THIS RELEASE * CVE-2005-4348 Fix segmentation fault (null pointer dereference) in multidrop mode with headerless email. See fetchmail-SA-2005-03.txt. Reported by Daniel Drake, patch by Sunil Shetye. (MA) # OTHER BUG FIXES, DOCUMENTATION AND TRANSLATION UPDATES * Fix broken default port in POP2. Patch by Stanislav Brabec, SUSE [CZ]. (MA) * Fix manual page, some lines starting with ' were escaped by \&. Reported by Simon Barner. (MA) * Ship with gettext-0.14.3 again, as 6.2.9-rc10 did. Found by Sunil Shetye. (MA) * Actually set default SSL certificate path if --sslcertpath is unset. Reported by Heino Tiedemann and Rob MacGregor. (MA) * Remove bogus Netscape IMAP4rev1 Service >= 3.6 warning about BODY[TEXT] that we are not using. Patch by Sunil Shetye. (MA) * Plug potential memory and socket leak when polling multiple folders or when the upstream sends bogus message sizes. Patch by Sunil Shetye. (MA) * Update Catalan translation, by Ernest Adrogué Calveras. (MA) * Fix segfault (null pointer dereference) on some operating systems with fetchmail's obsolete DNS MX/host alias lookups in multidrop mode. Patch by Dr.-Ing. Andreas Haakh. (MA) * Close SMTP sockets early, to reduce resource usage, trigger earlier delivery with some MTAs and avoid SIGPIPE (SIG 13) when the SMTP listener gets bored and drops the connection after timeout. Patch by Sunil Shetye. (MA) * Don't treat hitting a fetch limit as error. Patch by Sunil Shetye. (MA) * Fix negative "messages left on server" on idle/repoll with fetchlimit. Patch by Sunil Shetye. (MA) * Properly track logout stage. Patch by Sunil Shetye. (MA) * Preserve error conditions across postconnect script. Sunil Shetye. (MA) * Do not trash destination domain if multiple messages are forwarded into the same SMTP/LMTP connection. Reported by Joachim Feise, Berlios Bug #5849. (MA) * Manual page: Add "-md5" to "openssl x509" example in --sslfingerprint documentation, since OpenSSL 0.9.8 changed the default to SHA1. Suggested by Jason White. (MA) * Cope with servers that return UID information in response to non-UID RFC822.{SIZE|HEADER} requests. Reported by Jason White. Patch suggestion by by Sunil Shetye, simplified by MA. Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDppmVvmGDOQUufZURAsmjAJ4hRWPQf/xFiW6Uf0hscZqjLL1JywCfZqcx HWL8U9SWHyOOQY1tqM4xDys= =iql6 -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-12-19 12:25:17
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I am announcing the release of fetchmail 6.2.5.5. This release fixes a denial of service bug/fetchmail crash in multidrop mode, plugs a socket leak when SSL negotiation fails and adds the three security announcements from 2005 that the project issued so far. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=8403> fetchmail-6.2.5.X is a security fix branch that forked off fetchmail-6.2.5. It does not change for anything but security and the most severe bug fixes. Note this 6.2.5.X branch is going to be discontinued in Early 2006, all users are advised to upgrade to the new 6.3.1 fetchmail release instead. There have been very few incompatible changes, most sites should be unaffected. 6.3.1 however fixes dozens of bugs (literally) that 6.2.5.5 still has. fetchmail 6.3.1 is available from <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=8405> These are the relevant changes in 6.2.5.5 since (and excluding) 6.2.5.4: * SECURITY FIX CVE-2005-4348: fix null pointer dereference in multidrop mode when the message is empty. Reported by Daniel Drake <http://article.gmane.org/gmane.mail.fetchmail.user/7573> and others (Debian Bug #343836). Fix by Sunil Shetye. * Fix Debian bug #301964, fetchmail leaks sockets when SSL negotiation fails. Fix suggested by Goswin Brederlow. * Add fetchmail-SA-2005-{01,02,03}.txt Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDppiZvmGDOQUufZURAiVVAKCrH0gGmn/GCjFa8jag7FeUoPSyOQCgsezV BQuopaSln4QWcgLAYBm4OPM= =IvLw -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-12-18 12:14:01
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have released the final 6.3.1 release candidate, dubbed fetchmail-6.3.1-rc1. It is available from http://home.pages.de/~mandree/fetchmail/ Unless regressions since 6.3.0 are found, this will be released as 6.3.1 somewhen next week. The French translation lacks six messages I cannot translate properly by myself, help will be appreciated (just send the missing msgid/msgstr pairs to me either on- or off-list). Please follow up to <fet...@li...> only. Note that the fetchmail-friends@ list is supposed to be discontinued, please resubscribe at BerliOS, for information, please see <https://lists.berlios.de/mailman/listinfo/fetchmail-users> These are the changes since 6.3.0: >------------------------------------------------------------------------------- * The multidrop To/Cc guessing code along with the fragile duplicate suppressor is deprecated and may be removed from a future release. (MA) >------------------------------------------------------------------------------- * Fix broken default port in POP2. Patch by Stanislav Brabec, SUSE [CZ]. (MA) * Fix manual page, some lines starting with ' were escaped by \&. Reported by Simon Barner. (MA) * Ship with gettext-0.14.3 again, as 6.2.9-rc10 did. Found by Sunil Shetye. (MA) * Actually set default SSL certificate path if --sslcertpath is unset. Reported by Heino Tiedemann and Rob MacGregor. (MA) * Remove bogus Netscape IMAP4rev1 Service >= 3.6 warning about BODY[TEXT] that we are not using. Patch by Sunil Shetye. (MA) * Plug potential memory and socket leak when polling multiple folders or when the upstream sends bogus message sizes. Patch by Sunil Shetye. (MA) * Fix segfault (null pointer dereference) in multidrop mode with headerless email. Reported by Daniel Drake, patch by Sunil Shetye. (MA) * Update Catalan translation, by Ernest Adrogué Calveras. (MA) * Fix segfault (null pointer dereference) on some operating systems with fetchmail's obsolete DNS MX/host alias lookups in multidrop mode. Patch by Dr.-Ing. Andreas Haakh. (MA) * Close SMTP sockets early, to reduce resource usage, trigger earlier delivery with some MTAs and avoid SIGPIPE (SIG 13) when the SMTP listener gets bored and drops the connection after timeout. Patch by Sunil Shetye. (MA) * Don't treat hitting a fetch limit as error. Patch by Sunil Shetye. (MA) * Fix negative "messages left on server" on idle/repoll with fetchlimit. Patch by Sunil Shetye. (MA) * Properly track logout stage. Patch by Sunil Shetye. (MA) * Preserve error conditions across postconnect script. Sunil Shetye. (MA) * Do not trash destination domain if multiple messages are forwarded into the same SMTP/LMTP connection. Reported by Joachim Feise, Berlios Bug #5849. (MA) (This patch had not been committed to SVN at the time of the 6.3.1-pre1 release on 2005-12-13.) * Manual page: Add "-md5" to "openssl x509" example in --sslfingerprint documentation. Suggested by Jason White. (MA) * Cope with servers that return UID information in response to non-UID RFC822.{SIZE|HEADER} requests. Reported by Jason White. Patch suggestion by by Sunil Shetye, simplified by MA. >------------------------------------------------------------------------------- - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDpUR3vmGDOQUufZURAguXAJ9tslzlbNY3Xn7LiWwQdOqZfUXIlACgi6mJ 9glYchTf96xevABPML/kByE= =o61G -----END PGP SIGNATURE----- |
From: Rob F. <rf...@fu...> - 2005-12-07 04:39:10
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Community Fetchmail team is happy to announce the release of Fetchmail 6.3.0 on 30 November, 2005. More than two years after the previous formal 6.2.5 release, this collects several dozen bug fixes, documentation, portability and IPv6 improvements and marks the beginning of a new "stable" 6.3.X branch that will not change, except for bug fixes and documentation updates. This is also the first major release from the new Community Fetchmail maintenance team, which took over from longtime maintainer Eric S. Raymond in June 2004. As a result of this change, the Fetchmail home page moved to: http://fetchmail.berlios.de/ And the mailing list focus has moved to the lists hosted at Berlios, located at: http://developer.berlios.de/mail/?group_id=1824 Future versions of Fetchmail with new features or changes that affect Fetchmail's behavior will be called 6.4.0 or 7.0.0 depending how large the impact is. This means that we will not have "gold" releases any more, but instead the 6.3.X release with the greatest X is usually the best. Changes between Fetchmail 6.2.5 and 6.3.0: The --netsec/-T options were removed. The --smtphost is now always "localhost". fetchmail now uses automake. Internationalization now requires gettext 0.14 to be installed separately. More than 140 user-visible changes were made, most of them bugfixes. Some documentation and translation updates were made to improve stability and protocol conformance, to improve bounce and warning messages, and to improve portability. (Note: for those who downloaded the .asc GnuPG signature file in the first 23 hours after release, they will have seen "BAD signature". The signature file was broken by the maintainer's last-minute change to the NEWS file. A new signature file was uploaded on 2005-12-01 at 23:57 UTC.) About Fetchmail: Fetchmail is a free, full-featured, robust, well-documented remote-mail retrieval and forwarding utility intended to be used over on-demand TCP/IP links (such as SLIP or PPP connections). It supports every remote-mail protocol now in use on the Internet: POP2, POP3, RPOP, APOP, KPOP, all flavors of IMAP, and ESMTP ETRN. It can even support IPv6 and IPSEC. http://fetchmail.berlios.de/ - -- ==============================| "A slice of life isn't the whole cake Rob Funk <rf...@fu...> | One tooth will never make a full grin" http://www.funknet.net/rfunk | -- Chris Mars, "Stuck in Rewind" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFDlllNC+BU/gUoZAMRArMYAJ0ahklzCKWTMQpPjOLBEO9axKWROgCfZfre QOHK0M3WNJcLymdpQnw6mPw= =eZUA -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-11-28 01:23:08
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, This is it - I have just released fetchmail 6.2.9-rc10, the final release candidate before 6.3.0, with minor bug fixes. Unless show stopping bugs are found, this will be released as fetchmail 6.3.0 on November 30. At that date, I will bump the version, copy the SVN /trunk to /branches/BRANCH_6-3, tag RELEASE_6-3-0 and release. I don't care for reports about cosmetic bugs unless accompanied by a fix which is either trivial or otherwise obviously correct. NOTE: Fetchmail used to have these translations, but unless someone submits updated translation (.po) files to the Translation Project's Robot (doesn't matter if for -rc9 or -rc10) and has it relayed to fetchmail-devel by Wednesday UTC noon, these will be dropped from the distribution as they lack too many translations and would result in a horrible English/local language mix: da Danish el Greek gl Galician pt_BR Brazilian Portuguese sk Slovak tr Turkish My special thanks go to Jakub Bogusz, Pavel Maryanov and Takeshi Hamasaki for their efforts to get the Polish, Russian and Japanese translations updated. For distributors, please upload this to every distribution that you have where small changes in behavior are allowed, to expose this to wider testing, and put this through your build farms. Changes since -rc9 are: * Fix installation without Python. Sunil Shetye, reported by Peter Church. (MA) * Update Japanese translation. Fixes Bug#329342, Takeshi Hamasaki. (MA) * Fix imap.c size safeguard that broke on x86_64 architecture. Matthias Andree * The FAQ is now available for duplex DIN A4 printing in PDF format. Don't bother to ask for a Letter version, I don't care. Matthias Andree * Man page: Use \- in the manual page where appropriate so that copy & paste works. I hope we got them all. Héctor García, Matthias Andree. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=8158> <http://home.pages.de/~mandree/fetchmail/> Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDik3avmGDOQUufZURAkcpAKCGUZ9KyG/hMJJtSTkNxq0zg+J3qgCfV76R pxHVr2GuKSSEXzhTW42BQPs= =cUee -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-11-18 02:49:45
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I am announcing the release of fetchmail 6.2.5.4. For the main part, the updated fetchmailconf that fixed CVE-2005-3088 (the password exposure problem) is now part of the tarball, many build problems with 6.2.5 and 6.2.5.2 were fixed and the infamous "timeout" bug with IMAP that only showed with several servers (for instance, older CommuniGate; Debian Bug#314509) was also fixed. CVE-2005-2335 was already fixed in 6.2.5.2, the fix is also part of 6.2.5.4. See below for details. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7976> fetchmail-6.2.5.X is a security fix branch that forked off fetchmail-6.2.5. It does not change for anything but security and the most severe bug fixes. Note that no 6.2.5.X security audits are planned except when a particular bug is reported, and that 6.2.5.X is unsafe to use on some systems, particularly those that lack a *working and secure* snprintf implementation. This 6.2.5.X branch is ONLY intended for packages for systems that cannot move forward to a newer version for stability policies, such as Debian stable. Note that this branch may be discontinued alongside the official 6.3.0 release without further notice. End users and all other systems should therefore use a current fetchmail-6.2.9-rc* release candidate or, if available at that time, 6.3.X or newer release. These are the relevant changes since (and excluding) 6.2.5.2: * SECURITY FIX CVE-2005-3088: fetchmailconf: fix password exposure: use umask 077 before opening output file and restore umask later. * Critical fix: fix IMAP timeouts, counting message count down on servers that do not send EXISTS counts after EXPUNGE. Debian Bug#314509. * On FreeBSD, add /usr/local/include to CPPFLAGS so that libintl.h is found. * Avoid automatically picking up HESIOD implementations that lack hesiod_getmailhost, such as the one in FreeBSD's base system. * Fix makedepend for separated build (where the build is not run from the source directory), but prevent packaging from separated build, it yields bogus results. * Fix resolv.h autodetection. * Add +HESIOD to version printout if appropriate. * Ship pre-built rcfile_l.c for systems that don't have flex. * Also ship pre-built rcfile_y.[ch] for systems that don't have flex, yacc or bison. * Build environment: Update included gettext. Fix --with-included-gettext. Fix parallel build (make -j). Fix "always rebuild fetchmail" syndrome. * Do not link against -ll or -lfl (not needed). Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDfTM3vmGDOQUufZURAtu2AKCyPEETBn+q1vTQBMF3eHCR0UlEhQCdE7Os i1DBvMPM0ry0ufynC+0QjKE= =fUW6 -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-11-18 02:40:52
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have just released fetchmail 6.2.9-rc9, the hopefully last release candidate before 6.3.0, with minor bug fixes. For distributors, please upload this to every unstable/testing/current distribution that you have (do not upload to "stable", it changes behavior in a few places) to expose this to wider testing. Changes since -rc8 are: * The default for --smtphost is now always "localhost" regardless of authentication types and protocols, so as to simplify configurations for workstations where the SMTP daemon only listens on the loopback interface. Sunil Shetye & Matthias Andree * Man page: update --smtphost documentation. Sunil Shetye, Matthias Andree. * Man page: update --smtpaddress documentation. Sunil Shetye. * Fix several memory leaks and bugs in the SMTP/LMTP retry logic where fetchmail confused UNIX and Internet domain sockets. Sunil Shetye. * Man page (BUGS): document that passwords are length limited. Matthias Andree * Man page: Document that quoted strings that run across line boundaries contain the control characters (CR or LF). Document explicitly the backslash escape sequences and their differences from the escape sequences used in the C programming language. Matthias Andree * Fix segfault when run control file ends with a backslash inside an unterminated quoted string. Matthias Andree. * In quoted strings, support backslash as last character on a line to join the following line to the current. Matthias Andree. * Parsing untagged IMAP responses is more robust now. Matthias Andree. * Man page: Remove some procmail praises in --mda documentation, suggest maildrop instead, warn of procmail fallthrough behavior. Matthias Andree. * Man page: Revise AUTHORS and SEE ALSO sections. Matthias Andree. * Updated translations: Albanian [sq] (Besnik Bleta), Catalan [ca] (Ernest Adrogué Calveras), Czech [cs] (Miloslav Trmac), German [de] (MA), Spanish (Castilian) [es] (Javier Kohen), French [fr] (MA), Polish [pl] (Jakub Bogusz), Russian [ru] (Pavel Maryanov). * In oversized warning messages, print the account name, too. Fixes Debian Bug#213299. Sunil Shetye (MA). * Fix '!: command not found' in configure script on nonconformant shells such as Solaris' /bin/sh. * The IMAP trail-eating fix in -rc8 was broken and fixed by Sunil Shetye. I seek everyone to test it out, report remaining bugs, update outdated translations (send your translated .po files to the translation project's robot, it'll forward your translation to the -devel list) or send patches for documentation or report inconsistencies (including formatting!) in the documentation. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=8049> <http://home.pages.de/~mandree/fetchmail/> Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDfTEivmGDOQUufZURAhvXAKD6MF7T8MhWvpjlJ/11PsRjaVjmRgCgnry2 oGSAFM4uTU3QdG6IZB1FgcA= =82bb -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-11-10 03:57:56
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have just released fetchmail 6.2.9-rc8, the hopefully last release candidate before 6.3.0. It fixes two regressions introduced into -rc7 and fixes another minor bug. Some polish was added to manual page and error messages. - ----------------------------------------------------------------------- Support call - fetchmail needs funding: <https://developer.berlios.de/developer/make_donation.php?user_id=2007> - ----------------------------------------------------------------------- For distributors, please upload this to every unstable/testing/current distribution that you have (do not upload to "stable", it changes behavior in a few places) to expose this to wider testing. Changes since -rc7 are: * POP2 is obsolete. Support for POP2 may be removed from a future fetchmail version without further notice. (MA) * When eating IMAP message trailer, don't see any line containing "OK" as the end of the trailer, but wait for the proper tagged OK line. To work around the qmail + Courier-IMAP problem in Debian Bug#338007. Matthias Andree * Fix Debian Bug#317761: when trying to send a bounce message, don't bail out if we cannot qualify our own hostname, so we aren't losing the bounce. Instead, pass the buck on to the SMTP server and use our own unqualified hostname. Matthias Andree * Revise some error messages so they are less confusing. Sunil Shetye. * Man page: update --smtphost documentation. Matthias Andree * Man page: clarify --loghost works only while detached. Matthias Andree (not in the NEWS file:) * Fix -rc7 crash when our own hostname cannot be qualified when we are to send a bounce. Matthias Andree I seek everyone to test it out, report remaining bugs, update outdated translations (send your translated .po files to the translation project's robot, it'll forward your translation to the -devel list) or send patches for documentation or report inconsistencies (including formatting!) in the documentation. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7951> <http://home.pages.de/~mandree/fetchmail/> Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDcrcyvmGDOQUufZURAhNEAKDViQK2aqSjUQ4QzRd1SgwXqol10QCfQ0i1 pS2MOIobL/KsbIULa8bWdws= =CpXr -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-10-31 00:38:37
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have just released fetchmail 6.2.9-rc7, yet another release candidate before 6.3.0, after yet another bugfix evening. - ----------------------------------------------------------------------- Support call - fetchmail needs funding: <https://developer.berlios.de/developer/make_donation.php?user_id=2007> - ----------------------------------------------------------------------- For distributors, please upload this to every unstable/testing/current distribution that you have (do not upload to "stable", it changes behavior in a few places) to expose this to wider testing. If someone is familiar with Kerberos 5, the automatic detection is broken, help with fixing configure.ac for Kerberos 5 without krb5-config will be appreciated. Changes since -rc6 are: * fetchmailconf -h documents the fetchmailconf -h option. Matthias Andree * fetchmailconf -V now prints the fetchmailconf version. Matthias Andree * Add support for SubjectAltName (RFC-2595 or 2818), to avoid bogus certificate mismatch errors. Patch by Roland Stigge, Debian Bug#201113. (MA) * make fetchmail --silent --quit really silent, Debian Bug #229014 by Dr. Andreas Krüger. Matthias Andree * cleanup --quit handling again (so that --silent --quit just kills the existing daemon, rather than continue running), and document it more clearly. Matthias Andree * Print an error message if multiple "defaults" records are found in the configuration file. Matthias Andree * Bury on_exit officially - the necessary code had been missing from 6.0.0, 6.2.0, 6.2.5. Matthias Andree * Exit with error if the lock file cannot be read. Matthias Andree * Exit with error if the lock file cannot be created exclusively, this got broken in a 6.2.6-pre, 6.2.5.2 and older were fine. Matthias Andree * Do not break some other process's lockfile in "-q" mode, but wait for the other process's exit. Matthias Andree * Man page: --sslfingerprint points user to x509(1ssl) and gives an example how to use it. Debian Bug#213484, Eduard Bloch. (MA) * Try to obtain FQDN as our own host by default, rather than using "localhost". If hostname cannot be qualified, complain noisily and continue, unless Kerberos, ODMR or ETRN are used (these require a FQDN). Partial fix of Debian Bug#150137. Fixes Debian Bug#316454. Matthias Andree * fetchmailconf now sets the service properly after autoprobe. Fixes Debian Bug#320645. Matthias Andree * fetchmail.man: Fix Debian Bug#241883, making global options more clear. Matt Swift, Matthias Andree. I seek everyone to test it out, report remaining bugs, update outdated translations (send your translated .po files to the translation project's robot, it'll forward your translation to the -devel list) or send patches for documentation or report inconsistencies (including formatting!) in the documentation. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7815> <http://home.pages.de/~mandree/fetchmail/> Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDZVexvmGDOQUufZURAtBUAJ9AIiALOB7rJKS0f+re5c6Uc8r47ACgyDNI T9vSFmnx8YtwCtMZCmCQIxk= =KyCq -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-10-29 17:28:56
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 fetchmail-SA-2005-02: security announcement Topic: password exposure in fetchmailconf Author: Matthias Andree Version: 1.02 Announced: 2005-10-21 Type: insecure creation of file Impact: passwords are written to a world-readable file Danger: medium Credits: Thomas Wolff, Miloslav Trmac for pointing out that fetchmailconf 1.43.1 was also flawed CVE Name: CVE-2005-3088 URL: http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt Affects: fetchmail version 6.2.5.2 fetchmail version 6.2.5 fetchmail version 6.2.0 fetchmailconf 1.43 (shipped with 6.2.0, 6.2.5 and 6.2.5.2) fetchmailconf 1.43.1 (shipped separately, now withdrawn) (other versions have not been checked but are presumed affected) Not affected: fetchmail 6.2.9-rc6 fetchmailconf 1.43.2 (use this for fetchmail-6.2.5.2) fetchmailconf 1.49 (shipped with 6.2.9-rc6) fetchmail 6.3.0 (not released yet) Corrected: 2005-09-28 01:14 UTC (SVN) - committed bugfix (r4351) 2005-10-21 - released fetchmailconf-1.43.2 2005-10-21 - released fetchmail 6.2.9-rc6 0. Release history ================== 2005-10-21 1.00 - initial version (shipped with -rc6) 2005-10-21 1.01 - marked 1.43.1 vulnerable - revised section 4 - added Credits 2005-10-27 1.02 - reformatted section 0 - updated CVE Name to new naming scheme 1. Background ============= fetchmail is a software package to retrieve mail from remote POP2, POP3, IMAP, ETRN or ODMR servers and forward it to local SMTP, LMTP servers or message delivery agents. fetchmail ships with a graphical, Python/Tkinter based configuration utility named "fetchmailconf" to help the user create configuration (run control) files for fetchmail. 2. Problem description and Impact ================================= The fetchmailconf program before and excluding version 1.49 opened the run control file, wrote the configuration to it, and only then changed the mode to 0600 (rw-------). Writing the file, which usually contains passwords, before making it unreadable to other users, can expose sensitive password information. 3. Workaround ============= Run "umask 077", then run "fetchmailconf" from the same shell. After fetchmailconf has finished, you can restore your old umask. 4. Solution =========== For users of fetchmail-6.2.5.2: - ------------------------------- Download fetchmailconf-1.43.2.gz from fetchmail's project site <http://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=6617>, gunzip it, then replace your existing fetchmailconf with it. For users of fetchmail-6.2.6* or 6.2.9* before 6.2.9-rc6: - --------------------------------------------------------- update to the latest fetchmail-devel package, 6.2.9-rc6 on 2005-10-21. <https://developer.berlios.de/project/showfiles.php?group_id=1824> A. References ============= fetchmail home page: <http://fetchmail.berlios.de/> B. Copyright, License and Warranty ================================== (C) Copyright 2005 by Matthias Andree, <mat...@gm...>. Some rights reserved. This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs German License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc-nd/2.0/de/ or send a letter to Creative Commons; 559 Nathan Abbott Way; Stanford, California 94305; USA. THIS WORK IS PROVIDED FREE OF CHARGE AND WITHOUT ANY WARRANTIES. Use the information herein at your own risk. END OF fetchmail-SA-2005-02.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDY5UwvmGDOQUufZURAqUhAJ0XxrMg5KiVEzsSTM8bgT9m1z2MyACg5lGh 5a6rj77JM6OycVmrPvINmOY= =YhtX -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-10-21 14:38:03
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have just released fetchmail 6.2.9-rc6, yet another release candidate before 6.3.0, after further fixes to -rc5, became necessary. - ----------------------------------------------------------------------- Fetchmail needs your support - please consider a donation via: <https://developer.berlios.de/developer/make_donation.php?user_id=2007> - ----------------------------------------------------------------------- Changes since -rc5 are: * fetchmailconf now changes the output file to mode 0600 BEFORE writing to it, so there is no window where passwords could be read by the world. Matthias Andree. * Missed --port/--service/--ssl cleanups in the manual. Reminder from Thomas Wolff. (MA) * Complain in POP3 if NTLM/MSN auth is requested but had not been enabled at compile time. This configuration mismatch now causes an error message and authentication failure. Found by Yves Boisjoly. Matthias Andree * fetchmailconf now allows expert users to choose the authorization type and also offers MSN and NTLM, suggested by Yves Boisjoly. Matthias Andree * fetchmailconf now (as of 1.49) writes its version to the comment of the saved run control file. Matthias Andree * Properly shut down SSL connections. Berlios Patch #647 by Arkadiusz Miśkiewicz. (MA) * Global variable cleanup, to fix daemon mode reinitialization problems. Patch by Sunil Shetye. (MA) I seek everyone to test it out, report remaining bugs, update outdated translations (send your translated .po files to the translation project's robot, it'll forward your translation to the -devel list) or send patches for documentation or report inconsistencies (including formatting!) in the documentation. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7672> <http://home.pages.de/~mandree/fetchmail/> Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDWOElvmGDOQUufZURAnEHAKCLG0lXreSui5fw1nqfYGRDihCsHgCfTh0Y ZGUGQHcBElLVaHfsUNurPOw= =PejO -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-09-26 11:16:36
|
Greetings, The fetchmail project needs YOU - as translator. If you know your language well, spell safely, please consider helping with translating fetchmail. Translations are coordinated by the translation project, http://translation.sourceforge.net/ The procedure is simple: 1. join your language team (see above link) - it usually means subscribing to the language team's mailing list and mentioning there that you'd wish to translate fetchmail message catalogs 2. download the -rc5 tarball to get an up-to-date .pot file 3. perhaps download the .po file from the repository (ask on the fetchmail-devel list for the exact address) 4. translate -- there are powerful tools to make this easy: There is a "po-mode" for the emacs editor, and there is "kbabel", a standalone KDE application. 5. mail the translation to the translation project's robot 6. the robot will archive the translation, check it, and if complete, send a copy to the fetchmail-devel list. For the languages marked with an asterisk below, except French, we have translators. I have been updating the French translation for the nonce, but I'd rather wish that a native or very experienced (several years in a Francophone area, with some courses) speaker handled this. We have outdated translations (that means less work than a new translation) for Albanian, Danish, Galician, Greek, Japanese, Brazilian Portuguese, Slovak, Turkish. These are our current statistics, languages shipping are marked with an asterisk or plus. Those with asterisk have a translator. I will not ship the translations without asterisk unless they are updated soon. * Language ca.po: 595 translated, 9 fuzzy, 2 untranslated. * Language cs.po: 580 translated, 16 fuzzy, 10 untranslated. Language da.po: 536 translated, 57 fuzzy, 13 untranslated. * Language de.po: 606 translated. Language el.po: 536 translated, 57 fuzzy, 13 untranslated. * Language es.po: 589 translated, 13 fuzzy, 4 untranslated. + Language fr.po: 603 translated, 3 untranslated. Language gl.po: 401 translated, 94 fuzzy, 101 untranslated. Language ja.po: 515 translated, 72 fuzzy, 19 untranslated. * Language pl.po: 595 translated, 9 fuzzy, 2 untranslated. Language pt_BR.po: 401 translated, 96 fuzzy, 99 untranslated. * Language ru.po: 595 translated, 9 fuzzy, 2 untranslated. Language sk.po: 400 translated, 18 fuzzy, 178 untranslated. Language sq.po: 525 translated, 51 fuzzy, 30 untranslated. Language tr.po: 538 translated, 56 fuzzy, 12 untranslated. Regards, -- Matthias Andree |
From: Matthias A. <mat...@gm...> - 2005-09-26 01:10:06
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have just released fetchmail 6.2.9-rc5, the hopefully final release candidate before 6.3.0, after further fixes to -rc4, mainly with the build breaking but also some minor bug fixes, became necessary. - ----------------------------------------------------------------------- Fetchmail needs your support - please consider a donation via: <https://developer.berlios.de/developer/make_donation.php?user_id=2007> - ----------------------------------------------------------------------- Changes since -rc4 are: * Add full support for --service option. Matthias Andree * Fix Japanese translation of "no other fetchmail is running". Debian Bug#329342, Takeshi Hamasaki. (MA) * When getaddrinfo() fails resolving a service, log getaddrinfo() error. (MA) * Fix bogus "cannot resolve service * to port number" error. Simon Barner. (MA) * Failure to set up SSL connections now results in PS_SOCKET. Suggested by Thomas Wolff. Matthias Andree. * Kerberos IV detection fix for FreeBSD 4. Simon Barner. (MA) * Fix display and documentation of --envelope option. Matthias Andree * Make "envelope 'Delivered-To'" work with dropdelivered. Timothy Lee. (MA) * Add -DBIND_8_COMPAT to Darwin (MacOS X) compiles, to fix build problems on newer Darwin versions. Matthias Andree. * fetchmail should now automatically detect if OpenSSL requires -ldl. Matthias Andree. * Fix Solaris build with --disable-nls (blastwave.org). Matthias Andree. I seek everyone to test it out, report remaining bugs, update outdated translations (send your translated .po files to the translation project's robot, it'll forward your translation to the -devel list) or send patches for documentation or report inconsistencies (including formatting!) in the documentation. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7373> <http://home.pages.de/~mandree/fetchmail/> Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDNy5LvmGDOQUufZURAtUnAKCSPWUaeh5MikENnzNf925HeDBjkwCfZ4xm 0he4bws7kMg+19T7y64GH1c= =X6Qr -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-09-21 11:06:26
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have just released fetchmail 6.2.9-rc4, yet another release candidate for 6.3.0, after minor fixes to -rc3 became necessary. Changes since -rc3 are: * Fix MacOS X compilation failures in sink.c (ru_*time has incomplete type). Berlios Bug #4725. Matthias Andree. * Fix "auth ntlm" to send AUTH NTLM (rather than AUTH MSN). Add "auth msn" officially. Reported by Yves Boisjoly. Matthias Andree * Expunge between IMAP folders when polling multiple folders. Sunil Shetye. (MA) * Fix IMAP expunged message counting. Sunil Shetye. (MA) I seek everyone to test it out, report remaining bugs, update outdated translations or send patches for documentation or report inconsistencies (including formatting!) in the documentation. The software is available from: <https://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=6617> <http://home.pages.de/~mandree/fetchmail/> - ----------------------------------------------------------------------- One of my primary hard disks is dying and needs urgent replacement. Fetchmail needs your support - please consider a donation via: <https://developer.berlios.de/developer/make_donation.php?user_id=2007> - ----------------------------------------------------------------------- Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDMSKQvmGDOQUufZURAqeSAKDxDXh8offRrEDydh3zjFQkYpKKHwCfZOb9 Nh/oHx+dxpcOeeNoFjMmCrs= =g3Nf -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-09-19 11:28:19
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I have just released fetchmail 6.2.9-rc3, yet release candidate for 6.3.0. It fixed --with-hesiod, reverted the "--flush removes oversized when not in daemon mode" behavior and added Sunil Shetye's --limitflush model. It fixes the build where "interface_init()" could not be resolved. There is an report that a 6.2.6-pre8 package didn't build on MacOS X (which will be fixed if still present) and I am aware that the MX alias detection code isn't IPv6 aware (this will probably not be fixed and rather removed from a future version). I seek everyone to test it out, report remaining bugs, update outdated translations or send patches for documentation or report inconsistencies (including formatting!) in the documentation. The software is available from: <http://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7307> <http://home.pages.de/~mandree/fetchmail/> - ----------------------------------------------------------------------- One of my primary hard disks is dying and needs urgent replacement. Fetchmail needs your support - please consider a donation via: <https://developer.berlios.de/developer/make_donation.php?user_id=2007> - ----------------------------------------------------------------------- Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDLoStvmGDOQUufZURAvWRAKCRrJGmBwG71GzIjDscHzEDIivUYQCgjeBx BwR3bE4QtheLkuFeBzBAwOw= =+6X4 -----END PGP SIGNATURE----- |
From: Matthias A. <mat...@gm...> - 2005-08-28 17:47:26
|
Greetings, I have just released fetchmail 6.2.9-rc2, another release candidate for 6.3.0. The IPv6 protocol support turned out to be rather intrusive, and as a side effect may have harmed domain alias detection for multidrop, the --monitor or --interface option and other systems I am not using. I seek everyone to test it out, report remaining bugs (I know that the IPv6 support is still not 100% complete), update outdated translations or send patches for documentation. The release notes are available at: <http://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=7035> The software is available from: <http://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7035> <http://home.pages.de/~mandree/fetchmail/> ----------------------------------------------------------------------- Fetchmail needs your support - please consider a donation via: <https://developer.berlios.de/developer/make_donation.php?user_id=2007> ----------------------------------------------------------------------- Regards, -- Matthias Andree |
From: Matthias A. <mat...@gm...> - 2005-08-25 15:45:48
|
Greetings, I have just released fetchmail 6.2.9-rc1, a release candidate for 6.3.0. I seek everyone to test it out, report remaining bugs (I know that the IPv6 support is still not 100% complete), update outdated translations or send patches for documentation. The release notes are available at: <http://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=7010> The software is available from: <http://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=7010> <http://home.pages.de/~mandree/fetchmail/> If you like fetchmail, and wish to show your appreciation of my maintaining fetchmail, consider donating to me via <https://developer.berlios.de/developer/make_donation.php?user_id=2007> Regards, -- Matthias Andree |
From: Matthias A. <mat...@gm...> - 2005-07-11 03:09:14
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, I deem the current fetchmail SVN code approaching official release. I rolled another snapshot, labelled as fetchmail-6.2.6-pre4. I consider this a release candidate, if nothing serious shows up in the next few days, this can become 6.3.0. da el gl ja pt_BR sk sq tr - these are the translations that have been removed from this release because they lag too far behind. They are: Danish, Greek, Galician, Japanese, Brazilian Portuguese, Slovak, Albanian and Turkish. Please help updating these translations. If you have a test machine available, please test this version and report back if it worked for you, if it fixed your favourite 6.2.5 bugs, or if it introduced new bugs, or if you tested it without anything in particular. In case this fails to compile, please state your ./configure options, the exact error message with a few lines leading up to the error, your operating system and version and installed packages - or just gzip and attach the config.log file. Note this all comes without warranty, as usual for GPL'd software. Download from: <http://home.pages.de/~mandree/fetchmail/fetchmail-6.2.6-pre4.tar.bz2> Detached GnuPG Signature at: <http://home.pages.de/~mandree/fetchmail/fetchmail-6.2.6-pre4.tar.bz2.sig> The important visible changes since -pre3 are: - - the manual page is more verbose on the differences of single- vs. multidrop, courtesy of Hannes Beinert - - the FAQ has additional information on SSL verification, courtesy of Brian Candler - - the .spec file for RPM building was updated (note that this currently requires you to override the version, RPM doesn't like the dash in -pre4 - this will not affect the final release). - - the POP3 client will not attempt to send "PASS secret" if "USER login" failed previously. - - some translations disabled as detailed above - - new Russian translation added - - some translations updated - - proto RPOP in the configuration file is now supported (used to be supported only on the command line) Regards, - -- Matthias Andree -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFC0ca3vmGDOQUufZURAhD1AKCs/jporuw0N9KLvZqI5ZerkSLQnwCeLq3S XWgLuWQBc5JsuWqkSt+DhuU= =jU2o -----END PGP SIGNATURE----- |