File fetchmail.changes of Package fetchmail
-------------------------------------------------------------------
Mon Feb 15 14:46:01 UTC 2010 - puzel@novell.com
- add fetchmail-CVE-2010-0562.patch (bnc#578212)
- fixes heap overflow in verbose X.509 cert display (only
printable chars)
-------------------------------------------------------------------
Mon Aug 10 09:30:16 UTC 2009 - puzel@novell.com
- add fetchmail-6.3.11-fix-invalid-free.patch
- fix https://bugs.gentoo.org/280760
-------------------------------------------------------------------
Sun Aug 9 12:43:26 CEST 2009 - coolo@novell.com
- use new python macros
-------------------------------------------------------------------
Thu Aug 6 11:35:50 UTC 2009 - puzel@novell.com
- update to 6.3.11
# SECURITY BUGFIXES
* CVE-2009-2666: SSL NUL prefix impersonation attack through NULs in a
part of a X.509 certificate's CommonName and subjectAltName fields. These
fields use opaque strings with a separate length field, so that the NUL
character isn't a special character inside the certificate. Fetchmail, being
written in the C language, used to treat these strings as C strings
nonetheless, so that the domain comparison would end at the first embedded NUL
character, rather than at the real end of the string.
Fetchmail will now abort certificate verification as failed if NULs are
encountered inside either of these fields regardless of their position, and
drop the connection even if --sslcertck is not used, because NUL is not a
valid character in legitimate DNS names.
See fetchmail-SA-2009-01.txt for details, including a minimal patch.
# BUGFIXES
* Remove the spurious message "message delimiter found while scanning headers".
RFC-5322 syntax states that the delimiter is part of the body, and the body is
optional.
* Convert all non-printable characters in certificate Subject/Issuer
Common Name or Subject Alternative Name fields to ANSI-C hex escapes (\xnn,
where nn are hex digits).
-------------------------------------------------------------------
Fri Jul 3 09:58:22 CEST 2009 - puzel@novell.com
- update to 6.3.10 (final version)
-------------------------------------------------------------------
Mon Jun 1 15:00:06 CEST 2009 - puzel@suse.cz
- update to 6.3.10-beta1
# INCOMPATIBLE BUGFIXES AND CHANGES:
* Fetchmail no longer drops permanently undelivered messages by default, to
match historic documentation. It does this by adding a new "softbounce"
option, see below.
* There is a new "softbounce" global option that prevents the deletion of
messages that have not been forwarded. It defaults to "true" for fetchmail
6.3.X in order to match historic documentation. This may change its default
in the next major release.
* For other changes, please see the package changelog
- update fetchmail-6.3.8-smtp_errors.patch (partially upstreamed)
-------------------------------------------------------------------
Tue Jan 13 11:56:26 CET 2009 - puzel@suse.cz
- update to 6.3.9 final
- deleted fetchmail-fix-permissions-doc.patch (fixed upstream)
-------------------------------------------------------------------
Mon Jan 12 14:53:53 CET 2009 - puzel@suse.cz
- fix spurious messages from fetchmail.init (bnc#464037)
-------------------------------------------------------------------
Fri Nov 14 20:59:37 CET 2008 - mrueckert@suse.de
- make the kerberos handling based on suse_version instead
of sles_version
-------------------------------------------------------------------
Thu Oct 9 11:40:00 CEST 2008 - puzel@suse.cz
- fix documentation inconsistency (bnc#174287)
- mark /etc/logrotate.d/fetchmail as %config(noreplace)
-------------------------------------------------------------------
Wed Oct 1 13:15:25 CEST 2008 - puzel@suse.cz
- Fix build on SLE9
- do not build with kerberos support on SLE9
-------------------------------------------------------------------
Tue Sep 9 11:36:52 CEST 2008 - kukuk@suse.de
- Remove support for dante (deprecated, homepage not reacheable,...)
-------------------------------------------------------------------
Thu Sep 4 17:07:26 CEST 2008 - puzel@suse.cz
- update to 6.3.9rc2
- bugfix release, see package changelog for details
- removed fetchmail-6.3.8-CVE-2007-4565.patch (fixed in upstream)
- removed fetchmail-6.3.8-long_headers_segfault.patch (fixed in upstream)
-------------------------------------------------------------------
Fri Aug 22 13:58:53 CEST 2008 - puzel@suse.cz
- fix build on SLE10
- do not run autoreconf if suse_version < 1010
-------------------------------------------------------------------
Thu Jul 24 17:12:51 CEST 2008 - puzel@suse.cz
- specfile cleanup and rpmlint warning fixes
* removed obsolete 'Provides: pop'
* added logrotate dependency
* removed unnecessary python dependency
* removed unnecessary 'export CFLAGS="$RPM_OPT_FLAGS"'
- %configure macro should suffice
- initscript fixes
* obsolete X-UnitedLinux-Should-Start replaced by
Should-Start
* same with Should-Stop
* added $remote-fs dependency
-------------------------------------------------------------------
Tue Jul 1 11:53:19 CEST 2008 - puzel@suse.cz
- updated fetchmail-6.3.8-long_headers_segfault.patch from upstream
-------------------------------------------------------------------
Tue Jun 17 13:20:08 CEST 2008 - puzel@suse.cz
- kerberos (krb5) support enabled [bnc#353817]
-------------------------------------------------------------------
Wed May 28 16:58:33 CEST 2008 - puzel@suse.cz
- fixed broken oneshot option in initscript [bnc#360507]
-------------------------------------------------------------------
Thu May 22 17:44:06 CEST 2008 - puzel@suse.cz
- fixed bnc#354291
* caused segmentation fault when retrieving mail with long To:
headers
-------------------------------------------------------------------
Wed Apr 30 17:49:47 CEST 2008 - pcerny@suse.cz
- added option to specify polling interval to init script
-------------------------------------------------------------------
Fri Mar 28 18:31:11 CET 2008 - pcerny@suse.cz
- additional fix for bnc#246829
[fetchmail-6.3.8-starttls.patch ->
fetchmail-6.3.8-smtp_errors.patch]
-------------------------------------------------------------------
Wed Nov 28 14:53:25 CET 2007 - pv@suse.de
- add PreReq pwdutils #327550 - yast2-mail fetchmail error
-------------------------------------------------------------------
Thu Sep 27 20:50:39 CEST 2007 - pcerny@suse.de
- Fix for DoS vulnerability (#308271 CVE-2007-4565)
- Do not remove messages if SMTP insists on TLS (#246829)
[fetchmail-6.3.8-starttls.patch]
-------------------------------------------------------------------
Tue Sep 11 15:15:14 CEST 2007 - ro@suse.de
- remove librsaref2-devel from buildrequires (unused)
-------------------------------------------------------------------
Fri Aug 31 18:09:04 CEST 2007 - pcerny@suse.cz
- librsaref2 => librsaref2-devel [#302599]
- removed %suseversion > 800 check (insserv)
-------------------------------------------------------------------
Mon Jul 2 21:49:01 CEST 2007 - lrupp@suse.de
- rsaref => librsaref2
-------------------------------------------------------------------
Thu Apr 19 14:15:51 CEST 2007 - sbrabec@suse.cz
- Updated to version 6.3.8:
* Make the APOP challenge parser more distrustful and have it
reject challenges that do not conform to RFC-822 msg-id format
(CVE-2007-1558).
* Repoll immediately if a protocol error happens during the
authentication attempt after a failed opportunistic TLS upgrade
(#262450).
* Do not crash with a null pointer dereference when opening the
BSMTP file fails.
* Make BSMTP output actually work.
* Add delete-later and delete-later.README.
* Fix KPOP.
* Fix repoll when server disconnects after opportunistic TLS
failed for POP3.
* Documentation and string fixes.
-------------------------------------------------------------------
Fri Mar 30 02:22:36 CEST 2007 - ro@suse.de
- added pwdutils to buildreq
-------------------------------------------------------------------
Tue Feb 6 15:01:38 CET 2007 - sbrabec@suse.cz
- Repair repoll after opportunistic TLS failed (#223507#c27,
Berlios#10133).
- Use upstream fix of KPOP regression (#223507#c26).
-------------------------------------------------------------------
Thu Jan 25 15:57:47 CET 2007 - sbrabec@suse.cz
- Fixed regression in KPOP support (#223507#c8).
http://lists.berlios.de/pipermail/fetchmail-devel/2007-January/000857.html
-------------------------------------------------------------------
Wed Jan 24 16:32:55 CET 2007 - sbrabec@suse.cz
- Updated to version 6.3.6 (#223507):
* Password disclosure vulnerability fixed (CVE-2006-5867).
* Repairs a regression in 6.3.5 that crashes fetchmail when a
message with invalid headers is found while fetchmail's mda
option is in use (CVE-2006-5974).
* Repair --logfile, broken in 6.3.5.
* Repair --user, broken in 6.3.5.
* RPOP: used to log the password locally rather than an asterisk
as the other protocols do.
* POP3: Probes capabilities now when Kerberos V5 is enabled, so
that we can actually detect if the server supports it.
* DNS: Detect /etc/resolv.conf changes
* When HOME and FETCHMAILHOME are unset, be sure to copy user
database information.
- Spec file cleanup.
-------------------------------------------------------------------
Wed Oct 25 19:36:22 CEST 2006 - sbrabec@suse.cz
- Fixed problems caused by calling daemon as non-root (#207305).
-------------------------------------------------------------------
Mon Oct 23 17:07:33 CEST 2006 - sbrabec@suse.cz
- Updated to version 6.3.5:
* Bug fixes.
* Translation updates.
* Logging behavior changes.
* fetchmail now supports foo@example.org=bar user mappings for
multidrop boxes.
* Bouncing improvements.
* Improved IMAP and SDPS behavior.
* See NEWS for deprecated features and major incompatible change
advance warnings.
-------------------------------------------------------------------
Sat Oct 21 15:01:29 CEST 2006 - schwab@suse.de
- Run automake.
-------------------------------------------------------------------
Thu Jun 1 16:43:40 CEST 2006 - sbrabec@suse.cz
- By default run as non-root user fetchmail (159764#c1).
- Implemented "oneshot" in the init script (159764#c8).
-------------------------------------------------------------------
Mon Apr 3 17:09:42 CEST 2006 - sbrabec@suse.cz
- Backported fixes for two crashes (159764#c9, 159764#c10).
-------------------------------------------------------------------
Wed Jan 25 21:35:51 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Mon Jan 23 12:49:11 CET 2006 - sbrabec@suse.cz
- Updated to version 6.3.2 (fixes CVE-2006-0321).
-------------------------------------------------------------------
Tue Jan 10 17:01:49 CET 2006 - sbrabec@suse.cz
- Updated to version 6.3.1 (fixes #140475).
-------------------------------------------------------------------
Mon Dec 5 20:07:59 CET 2005 - sbrabec@suse.cz
- Updated to version 6.3.0 (fixes #131232).
-------------------------------------------------------------------
Wed Jul 27 19:21:35 CEST 2005 - sbrabec@suse.cz
- Updated to version 6.2.5.2 (#97555).
-------------------------------------------------------------------
Mon Apr 25 17:13:23 CEST 2005 - sbrabec@suse.cz
- Prevent lost mails with NULL envelope (#80331).
-------------------------------------------------------------------
Thu Feb 3 01:46:25 CET 2005 - ro@suse.de
- fix build on older distributions
-------------------------------------------------------------------
Wed Jan 19 17:02:11 CET 2005 - sbrabec@suse.cz
- Turned on GSSAPI, SOCKS and RSAREF support.
- Fixed implicit declaration and random result warnings.
-------------------------------------------------------------------
Fri Sep 24 15:25:30 CEST 2004 - sbrabec@suse.cz
- Added more sysconfig options for init script.
-------------------------------------------------------------------
Thu Sep 16 14:31:43 CEST 2004 - aj@suse.de
- Remove wrong definition.
-------------------------------------------------------------------
Tue Aug 31 13:41:00 CEST 2004 - sbrabec@suse.cz
- Added sendmail to Required-Start/Stop (#44500).
-------------------------------------------------------------------
Wed May 05 13:21:08 CEST 2004 - sbrabec@suse.cz
- Added sysconfig variable for polling interval (#39777).
- Init script adapted to conform latest LSB.
-------------------------------------------------------------------
Tue Apr 27 01:26:21 CEST 2004 - ro@suse.de
- fix missing return value in pop2.c
-------------------------------------------------------------------
Tue Mar 30 12:35:25 CEST 2004 - sbrabec@suse.cz
- Added /etc/fetchmailrc to file list.
-------------------------------------------------------------------
Thu Mar 25 18:43:11 CET 2004 - mmj@suse.de
- Add postfix to # neededforbuild
-------------------------------------------------------------------
Wed Mar 10 14:20:07 CET 2004 - sbrabec@suse.cz
- Set fetchsizelimit for APOP and RPOP (bug #35555).
http://lists.ccil.org/pipermail/fetchmail-friends/2003-October/003958.html
-------------------------------------------------------------------
Wed Feb 04 17:13:20 CET 2004 - sbrabec@suse.cz
- Updated to version 6.2.5.
-------------------------------------------------------------------
Sat Jan 10 16:55:44 CET 2004 - adrian@suse.de
- add %defattr
-------------------------------------------------------------------
Thu Oct 23 14:27:10 CEST 2003 - kukuk@suse.de
- Remove wrong requires
-------------------------------------------------------------------
Thu Aug 07 15:41:46 CEST 2003 - sbrabec@suse.cz
- Updated to version 6.2.3.
-------------------------------------------------------------------
Tue May 20 11:52:16 CEST 2003 - mmj@suse.de
- Fix typo
-------------------------------------------------------------------
Wed Mar 26 15:58:20 CET 2003 - sbrabec@suse.cz
- Updated to version 6.2.2.
- Created startup script.
-------------------------------------------------------------------
Thu Jan 16 11:38:02 CET 2003 - sbrabec@suse.cz
- Updated to version 6.2.1.
-------------------------------------------------------------------
Fri Dec 13 19:50:23 CET 2002 - mmj@suse.de
- Update to 6.2.0 which has security fix for rfc822.c and some
translations plus an SMTP timeout patch
-------------------------------------------------------------------
Tue Dec 10 19:09:32 CET 2002 - sbrabec@suse.cz
- Updated to version 6.1.3.
-------------------------------------------------------------------
Wed Nov 20 14:32:34 CET 2002 - sbrabec@suse.cz
- Spec file cleanup (bug #21912).
-------------------------------------------------------------------
Thu Oct 24 18:47:33 CEST 2002 - sbrabec@suse.cz
- Update to version 6.1.1.
-------------------------------------------------------------------
Tue Oct 01 18:39:16 CEST 2002 - sbrabec@suse.cz
- Removed --with-included-gettext and re-enabled NLS.
- OPIE/OTP fixes.
- Spec file cleanup.
-------------------------------------------------------------------
Fri Sep 27 10:38:05 CEST 2002 - mmj@suse.de
- Update to 6.1.0 including since 5.9.13:
o Support for STARTTLS over IMAP
o Cleanups and bugfixes
o Translation update
o Fix for potential remote vulnerability in multidrop mode,
which according to the author is an important security fix.
-------------------------------------------------------------------
Mon Jul 29 19:56:29 CEST 2002 - jreuter@suse.de
- more spec file cleanup
-------------------------------------------------------------------
Mon Jul 29 17:19:19 CEST 2002 - jreuter@suse.de
- added /etc/logrotate.d/fetchmail (Bugzilla #17279)
- spec file cleanup
-------------------------------------------------------------------
Fri Jul 19 19:58:31 CEST 2002 - jreuter@suse.de
- removed /usr/share/locale/*/LC_MESSAGES/fetchmail.mo from file list
-------------------------------------------------------------------
Wed Jul 17 13:18:49 CEST 2002 - jreuter@suse.de
- updated to version 5.9.13
- disabled NLS support because it doesn't compile and esr is about
to remove it anyway
- complete changelog: http://tuxedo.org/~esr/fetchmail/NEWS
-------------------------------------------------------------------
Sat Mar 23 15:51:48 CET 2002 - kukuk@suse.de
- Fix fetchmailconf (wrong python widget destroy calls) [Bug #15391]
-------------------------------------------------------------------
Mon Sep 17 15:49:17 CEST 2001 - bjacke@suse.de
- minor fixes in README.SUSE
-------------------------------------------------------------------
Thu Aug 16 23:07:12 CEST 2001 - bjacke@suse.de
- update to 5.9.0
-------------------------------------------------------------------
Thu Jul 12 16:51:45 CEST 2001 - bjacke@suse.de
- update to 5.8.14
-------------------------------------------------------------------
Fri Jun 15 01:12:08 CEST 2001 - bjacke@suse.de
- patch to prevent buffer overflow due to long headers
-------------------------------------------------------------------
Tue Apr 3 13:07:18 CEST 2001 - bjacke@suse.de
- update to 5.8.0
-------------------------------------------------------------------
Thu Mar 22 18:51:02 CET 2001 - ro@suse.de
- added split-aliases as provides
-------------------------------------------------------------------
Wed Feb 14 12:36:44 CET 2001 - bjacke@suse.de
- updated to 5.6.5 (fixes #6245)
- fix fetchmailconf nospambounce problem
- enable RPA protocol
-------------------------------------------------------------------
Fri Jan 5 16:30:40 CET 2001 - bjacke@suse.de
- disabled IPv6 support for the time being to fix bug #5111
-------------------------------------------------------------------
Wed Dec 20 16:37:10 CET 2000 - garloff@suse.de
- pass --enable-NTLM to configure in order to enable M$ Exchange
compatible auth proto
- explicitly specify the directories with --mandir etc ...
- Use DESTDIR= instead of prefix to pass RPM_BUILD_ROOT
- add %{?suse_update_config}
-------------------------------------------------------------------
Mon Dec 18 15:25:28 CET 2000 - bjacke@suse.de
- some spec file fixes
-------------------------------------------------------------------
Mon Dec 18 14:25:01 CET 2000 - ro@suse.de
- Fix requires for fetchmailconf (again)
-------------------------------------------------------------------
Mon Dec 18 13:14:36 CET 2000 - bjacke@suse.de
- merged ssl stuff from fetchmailssl to fetchmail package
-------------------------------------------------------------------
Wed Nov 29 10:53:39 CET 2000 - bjacke@suse.de
- updated to 5.6.0
- adjust README to new boot concept
-------------------------------------------------------------------
Fri Nov 10 22:04:35 CET 2000 - bjacke@suse.de
- updated to version 5.5.5
- switched to long names
- added README.SuSE
-------------------------------------------------------------------
Sun Sep 3 14:57:40 CEST 2000 - bjacke@suse.de
- update to fetchmail-5.5.1
-------------------------------------------------------------------
Tue May 23 14:14:35 CEST 2000 - bk@suse.de
- moved fetchmailconf man page to subpackage fetchmcf
-------------------------------------------------------------------
Mon May 15 10:40:20 CEST 2000 - bk@suse.de
- update to fetchmail-5.4.0, new major version.
-------------------------------------------------------------------
Wed Mar 1 18:22:35 CET 2000 - werner@suse.de
- Fix config.guess selection
-------------------------------------------------------------------
Thu Feb 24 15:24:19 CET 2000 - dipa@suse.de
- update to fetchmail-5.3. update to fetchmail-5.3.00
-------------------------------------------------------------------
Tue Feb 15 03:36:31 CET 2000 - bk@suse.de
- update to fetchmail-5.2.8, that's the code freeze release for 5.3.0
-------------------------------------------------------------------
Tue Feb 8 02:53:41 CET 2000 - bk@suse.de
- update to fetchmail-5.2.7, Eric's changelog to 5.2.6 is very small:
* Updated FAQ and
* Updated es.po.
* Disable mail notification on server unreachable. This turned out to
be a very bad idea.
-------------------------------------------------------------------
Tue Feb 1 09:23:01 CET 2000 - ro@suse.de
- specfile typo
-------------------------------------------------------------------
Tue Feb 1 00:36:53 CET 2000 - ro@suse.de
- create man directory
-------------------------------------------------------------------
Mon Jan 31 19:39:32 CET 2000 - bk@suse.de
- restarted spec from package-provided spec, subpackages fetchmcf (fetchmailconf)
-------------------------------------------------------------------
Wed Oct 20 20:31:14 CEST 1999 - bk@suse.de
- split-off from pop, update to 5.1.2
