Re: [Fetchmail-users] ANNOUNCE: fetchmail 6.4.25 is available (documentation & translation updates, wolfSSL 5.0, fix to OpenSSL 1.0.2 support for Let's Encrypt Sites, configure updates)

[Gene H. <ghe...@sh...>]

On Fri, 10 Dec, 2021 at 2:25 PM, Matthias Andree <mat...@gm...> wrote:
 

To: fet...@li...; fet...@li...; fet...@li...
Greetings,

The 6.4.25 release of fetchmail is now available at 
<https://sourceforge.net/projects/fetchmail/files/branch_6.4/>.<https://sourceforge.net/projects/fetchmail/files/branch_6.4/>.>

DISTRIBUTORS please note OpenSSL's licensing change for OpenSSL 3,
and you may want to review COPYING. NOTE that LibreSSL licensing
is incompatible with fetchmail's, as there is no GPL clause 2(b) 
exception for LibreSSL, so LibreSSL can only be used where it is
part of the operating system (one of the very few examples is OpenBSD).

There have been several tweaks to improve the stability of the
configure script and build again.

The source archive is available at:
<https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.xz/download><https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.xz/download>>
<https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.lz/download><https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.lz/download>>

Detached GnuPG signatures for the respective tarballs are at:
<https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.xz.asc/download><https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.xz.asc/download>>
<https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.lz.asc/download><https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.25.tar.lz.asc/download>>

SHA256 hash values for the tarballs:
SHA256(fetchmail-6.4.25.tar.lz)= ba94f3d9ea3e9dd55e59b7a08ca71edfdbc3e3ca1413a285aa8b08aaac923b05
SHA256(fetchmail-6.4.25.tar.xz)= 7ebefbe89172fd59f0fd8317d8743a8436f375ccdcab3900e4c3ec06a8fbf27f

Here are the release notes:

---------------------------------------------------------------------------------
fetchmail-6.4.25 (released 2021-12-10, 31653 LoC):

# BREAKING CHANGES:
* Since distributions continue patching for LibreSSL use, which cannot be
 linked legally, block out LibreSSL in configure.ac<http://configure.ac> and socket.c, and
 refer to COPYING, unless on OpenBSD (which ships it in the base system).
 OpenSSL and wolfSSL 5 can be used.  SSL-related documentation was updated, do 
 re-read COPYING, INSTALL, README, README.packaging, README.SSL.
* Bump OpenSSL version requirement to 1.0.2f in order to safely remove
 the obsolete OpenSSL flag SSL_OP_SINGLE_DH_USE. This blocks out 1.0.2e and 
 older 1.0.2 versions. 1.0.2f was a security fix release, and 1.0.2u is 
 publicly available from https://www.openssl.org/source/old/1.0.2/
* Some of the configure.ac<http://configure.ac> fiddling MIGHT have broken cross-compilation
 again. The maintainer does not test cross-compiling fetchmail; if you
 have difficulties, try setting PKG_CONFIG_LIBDIR to the pkg-config path
 containing your target/host libraries, or see if --with-ssl-prefix or 
 --with-wolfssl-prefix, or overriding LDFLAGS/LIBS/CPPFLAGS, can help.
 Feedback solicited on compliant systems that are before end-of-life.

# BUG FIXES:
* 6.4.24's workaround for OpenSSL 1.0.2's X509_V_FLAG_TRUSTED_FIRST flag
 contained a typo and would not kick in properly.
* Library and/or rpath setting from configure.ac<http://configure.ac> was fixed.

# ADDITIONS:
* Added an example systemd unit file and instructions to contrib/systemd/
 which runs fetchmail as a daemon with 5-minute poll intervals.
 Courteously contributed by Barak A. Pearlmutter, Debian Bug#981464.
* fetchmail can now be used with wolfSSL 5's OpenSSL compatibility layer,
 see INSTALL and README.SSL. This is considered experimental.
 Feedback solicited.

# CHANGES:
* The getstats.py<http://getstats.py> dist-tool now counts lines of .ac and .am files.
* ./configure --with-ssl now supports pkg-config module names, too. See INSTALL.

# TRANSLATIONS: language translations were updated by these fine people:
(in reverse alphabetical order of language codes so as not to prefer people):
* sv:    Göran Uddeborg [Swedish]
* sq:    Besnik Bleta [Albanian]
* pl:    Jakub Bogusz [Polish]
* ja:    Takeshi Hamasaki [Japanese]
* fr:    Frédéric Marchal [French]
* eo:    Keith Bowes [Esperanto]
* cs:    Petr Pisar [Czech]

# CREDITS:
* Thanks to Corey Halpin for testing release candidates.
--------------------------------------------------------------------------------

Happy fetches,
Matthias


This reminds me of the compuserve debacle over gif, so we invented png.
Its about time a new ssl was written?


Take care and stay well Matthias 
Gene