Re: [Fetchmail-users] SECURITY ANNOUNCE (INTERIM): fetchmail users should configure --ssl wherever available, and also require at least TLS1.2

[Matthias A. <mat...@gm...>]

Am 15.08.21 um 22:08 schrieb Peter Pentchev:
> On Sun, Aug 15, 2021 at 11:58:34AM -0700, Peter Scott via Fetchmail-users wrote:
>> Dear Matthias,
>>
>> Fedora 34 just upgraded fetchmail for us.
>>
>> Now fetchmail --version shows
>>
>> This is fetchmail release 6.4.20+GSS+RPA+NTLM+SDPS+SSL-SSLv2-SSLv3+NLS+KRB5.
>> Compiled with SSL library 0x101010bf "OpenSSL 1.1.1k  FIPS 25 Mar 2021"
>> Run-time uses SSL library 0x101010bf "OpenSSL 1.1.1k  FIPS 25 Mar 2021"
>> OpenSSL: OPENSSLDIR: "/etc/pki/tls"
>> Engines: ENGINESDIR: "/usr/lib64/engines-1.1"
>>
>> Since this upgrade my fetchmail logfile is showing the
>> "run-together-lines" behavior, lacking the usual newline chars.
> I think this bug was fixed in 6.4.21, was it not? So when the Fedora
> maintainer updates fetchmail to 6.4.21, you will get the fix.

Peter,

correct, the --syslog and --logfile I broke in 6.4.20 were fixed in 6.4.21.

The Fedora package maintainer wrote me this morning that he updated
things earlier today, but the builds will take a few days to propagate.

My addition is that the daring may check
<https://koji.fedoraproject.org/koji/packageinfo?packageID=1046> and
grab their RPM individually and test, but I am not affiliated with
Fedora and cannot help or support this - but feel free to share your
findings on Fedora's Bodhi if it works for you (it did not for me), or
here, if you try.

Regards,
Matthias