diff options
author | Matthias Andree <matthias.andree@gmx.de> | 2014-05-21 22:27:26 +0200 |
---|---|---|
committer | Matthias Andree <matthias.andree@gmx.de> | 2014-05-21 22:31:06 +0200 |
commit | 358b72cbe65c780e3a63cd104f41333dffcda60c (patch) | |
tree | ff7f9dffa65b32d65dc32d8b10b85b628b6cd285 | |
parent | f287ff471c7e08c3e94ad915540468f1b480c55d (diff) | |
download | fetchmail-358b72cbe65c780e3a63cd104f41333dffcda60c.tar.gz fetchmail-358b72cbe65c780e3a63cd104f41333dffcda60c.tar.bz2 fetchmail-358b72cbe65c780e3a63cd104f41333dffcda60c.zip |
Convert most references from berlios.de to sourceforge.net.
Re-sign EN and SAs because that broke signatures.
33 files changed, 866 insertions, 157 deletions
@@ -65,6 +65,7 @@ fetchmail-6.3.27 (not yet released, if ever): * Fix a typo in the FAQ. Submitted by David Lawyer, Debian Bug#706776. * Do not translate header tags such as "Subject:". Reported by Gonzalo Pérez de Olaguer Córdoba, Debian Bug#744907. +* Convert most links from berlios.de to sourceforge.net. # KNOWN BUGS AND WORKAROUNDS (This section floats upwards through the NEWS file so it stays with the @@ -59,8 +59,7 @@ forwarding via SMTP to sendmail). You can get the code from the fetchmail home page: http://www.fetchmail.info/ - - http://fetchmail.berlios.de/ + http://fetchmail.sourceforge.net/ Enjoy! diff --git a/RELEASE-INSTRUCTIONS b/RELEASE-INSTRUCTIONS index e5d83be7..8fbb23ea 100644 --- a/RELEASE-INSTRUCTIONS +++ b/RELEASE-INSTRUCTIONS @@ -13,7 +13,8 @@ To do a release: - These would be done automatically by makerelease.pl: - Upload sig and tarball to ~/public_html/fetchmail/ - - Upload sig and tarball to ftp.berlios.de:/incoming/ and release + - Upload sig and tarball to sourceforge, per + <https://sourceforge.net/p/forge/documentation/Release%20Files%20for%20Download/#rsync> - Update the fetchmail website for version, link to release nodes (update release_id) and last update, commit, and upload. diff --git a/archived-messages/000154.html b/archived-messages/000154.html new file mode 100644 index 00000000..4e2f1122 --- /dev/null +++ b/archived-messages/000154.html @@ -0,0 +1,449 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> +<HTML> + <HEAD> + <TITLE> [fetchmail-devel] [BUG] fetchmail hangs during pop3 pull after a mail with a null char + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:fetchmail-devel%40lists.berlios.de?Subject=Re%3A%20%5Bfetchmail-devel%5D%20%5BBUG%5D%20fetchmail%20hangs%20during%20pop3%20pull%20after%20a%20mail%20with%20a%20null%20char&In-Reply-To=%3C416D2205.3040502%40dgreaves.com%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <style type="text/css"> + pre { + white-space: pre-wrap; /* css-2.1, curent FF, Opera, Safari */ + } + </style> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="000152.html"> + <LINK REL="Next" HREF="000155.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[fetchmail-devel] [BUG] fetchmail hangs during pop3 pull after a mail with a null char</H1> + <B>David Greaves</B> + <A HREF="mailto:fetchmail-devel%40lists.berlios.de?Subject=Re%3A%20%5Bfetchmail-devel%5D%20%5BBUG%5D%20fetchmail%20hangs%20during%20pop3%20pull%20after%20a%20mail%20with%20a%20null%20char&In-Reply-To=%3C416D2205.3040502%40dgreaves.com%3E" + TITLE="[fetchmail-devel] [BUG] fetchmail hangs during pop3 pull after a mail with a null char">david at dgreaves.com + </A><BR> + <I>Wed Oct 13 14:39:33 CEST 2004</I> + <P><UL> + <LI>Previous message: <A HREF="000152.html">[fetchmail-devel] Not Yet Reviewed Queue is Empty! +</A></li> + <LI>Next message: <A HREF="000155.html">[fetchmail-devel] warning message charset fix: progress indicator 1/3. +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#154">[ date ]</a> + <a href="thread.html#154">[ thread ]</a> + <a href="subject.html#154">[ subject ]</a> + <a href="author.html#154">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>First : fetchmail is great - thanks :) + +I sent this to fetchmail-friends a while back and it was suggested that I send it to the devlist. +I joined and lurked - and finally got round to sending this in... + + +It's been working for years with these occasional hangs that have been +fixed by popping the bad messages and manually filing them. I finally +had a bad message arrive when I was in a position to debug! + +Summary : fetchmail hangs during pop3 pull after a mail with a null char. + +The mail with a null char is pulled OK but then rejected by local +Cyrus lmtp and bounced to postmaster via exim4.20 +The next pop3 pull then fails. +I've made an effort to trace and I think the hang occurs due to a +double call to SMTP_ok which is empty the second time. I am pretty +sure the second call originates at sink.c line 1433. + +in the config expunge 1 fixes the problem (which makes sense) + +general config is pop3->lmtp->local Cyrus IMAP + +So I went through the FAQ G3 points: +1. OS: Linux RedHat 7.3 kernel 2.6.6 +2. gcc version 2.96 20000731 (Red Hat Linux 7.3 2.96-110) +3. below +4. forwarding to lmtp listener on cyrus 2.2.3 (bounce goes to SMTP +exim 4.2) +5. -v -v -f /etc/fetchmailrc +6. at the end + +nb: SMTP_ok loop start comments are my trace. + +Aug 17 17:33:01 willow fetchmail[13648]: 6.2.5 querying pop3.ukfsn.org +(protocol POP3) at Tue 17 Aug 2004 05:33:01 PM BST: poll started +Aug 17 17:33:01 willow fetchmail[13648]: POP3< +OK +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">aa55cd0b5451bb3c3210dadaf2bf26b2 at pop3.ukfsn.org</A>> +Aug 17 17:33:01 willow fetchmail[13648]: POP3> CAPA^M +Aug 17 17:33:01 willow fetchmail[13648]: POP3< +OK Capability list follows +Aug 17 17:33:01 willow fetchmail[13648]: POP3< PIPELINING +Aug 17 17:33:01 willow fetchmail[13648]: POP3< TOP +Aug 17 17:33:01 willow fetchmail[13648]: POP3< USER +Aug 17 17:33:01 willow fetchmail[13648]: POP3< UIDL +Aug 17 17:33:01 willow fetchmail[13648]: POP3< STLS +Aug 17 17:33:01 willow fetchmail[13648]: POP3< . +Aug 17 17:33:01 willow fetchmail[13648]: POP3> USER dgreaves^M +Aug 17 17:33:01 willow fetchmail[13648]: POP3< +OK Tell me your password. +Aug 17 17:33:01 willow fetchmail[13648]: POP3> PASS *^M +Aug 17 17:33:02 willow fetchmail[13648]: POP3< +OK Welcome aboard! You +have 55 messages. +Aug 17 17:33:05 willow fetchmail[13648]: POP3> STAT +Aug 17 17:33:05 willow fetchmail[13648]: POP3< +OK 55 429607 +Aug 17 17:33:05 willow fetchmail[13648]: 55 messages for dgreaves at +pop3.ukfsn.org (429607 octets). + + + +fetchmailrc: +set syslog +set postmaster "<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A>" +set nobouncemail +set properties "" +#set daemon 180 +set idfile /var/run/fetchmail.ids + +# The ukfsn accounts +poll pop3.ukfsn.org with proto POP3 tracepolls +~ user 'dgreaves' there with password 'xxxxxxx' is +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A> here options fetchall lmtp smtp +/var/imap/socket/lmtp expunge 5 +~ antispam 571 550 501 554 + +<more user accounts removed> + +here is output from +~ ./fetchmail -v -v -f /etc/fetchmailrc + +Aug 17 17:43:33 willow fetchmail[13675]: 6.2.5 querying pop3.ukfsn.org +(protocol POP3) at Tue 17 Aug 2004 05:43:33 PM BST: poll started +Aug 17 17:43:33 willow fetchmail[13675]: POP3< +OK +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">40b4ee38e8c2b8d6ea0b39ace1b3d5cd at pop3.ukfsn.org</A>> +Aug 17 17:43:33 willow fetchmail[13675]: POP3> CAPA^M +Aug 17 17:43:33 willow fetchmail[13675]: POP3< +OK Capability list follows +Aug 17 17:43:34 willow fetchmail[13675]: POP3< PIPELINING +Aug 17 17:43:34 willow fetchmail[13675]: POP3< TOP +Aug 17 17:43:34 willow fetchmail[13675]: POP3< USER +Aug 17 17:43:34 willow fetchmail[13675]: POP3< UIDL +Aug 17 17:43:34 willow fetchmail[13675]: POP3< STLS +Aug 17 17:43:34 willow fetchmail[13675]: POP3< . +Aug 17 17:43:34 willow fetchmail[13675]: POP3> USER dgreaves^M +Aug 17 17:43:34 willow fetchmail[13675]: POP3< +OK Tell me your password. +Aug 17 17:43:34 willow fetchmail[13675]: POP3> PASS *^M +Aug 17 17:43:34 willow fetchmail[13675]: POP3< +OK Welcome aboard! You +have 33 messages. +Aug 17 17:43:37 willow fetchmail[13675]: selecting or re-polling +default folder +Aug 17 17:43:37 willow fetchmail[13675]: POP3> STAT +Aug 17 17:43:37 willow fetchmail[13675]: POP3< +OK 33 186252 +Aug 17 17:43:37 willow fetchmail[13675]: 33 messages for dgreaves at +pop3.ukfsn.org (186252 octets). +Aug 17 17:43:37 willow fetchmail[13675]: POP3> LIST 1 +#**********************************************Aug 17 17:43:37 willow +fetchmail[13675]: POP3< +OK 1 9060 +Aug 17 17:43:37 willow fetchmail[13675]: POP3> RETR 1 +Aug 17 17:43:37 willow fetchmail[13675]: POP3< +OK Message follows +Aug 17 17:43:37 willow fetchmail[13675]: reading message +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:1 of 33 (9060 octets) +Aug 17 17:43:37 willow fetchmail[13675]: About to rewrite Return-Path: +<linux-kernel-owner+lkml=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">40dgreaves.com-S268306AbUHQPkZ at vger.kernel.org</A>>^M +Rewritten version is Return-Path: +<linux-kernel-owner+lkml=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">40dgreaves.com-S268306AbUHQPkZ at vger.kernel.org</A>>^M +Aug 17 17:43:38 willow fetchmail[13675]: About to rewrite From: +"O.Sezer" <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">sezeroz at ttnet.net.tr</A>>^M Rewritten version is From: +"O.Sezer" <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">sezeroz at ttnet.net.tr</A>>^M +Aug 17 17:43:38 willow fetchmail[13675]: About to rewrite To: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel at vger.kernel.org</A>^M Rewritten version is To: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel at vger.kernel.org</A>^M +Aug 17 17:43:38 willow fetchmail[13675]: About to rewrite Cc: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">marcelo.tosatti at cyclades.com</A>^M Rewritten version is Cc: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">marcelo.tosatti at cyclades.com</A>^M +Aug 17 17:43:38 willow fetchmail[13675]: About to rewrite Sender: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel-owner at vger.kernel.org</A>^M Rewritten version is Sender: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel-owner at vger.kernel.org</A>^M +Aug 17 17:43:38 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:38 willow fetchmail[13675]: LMTP< 220 willow LMTP Cyrus +v2.2.3 ready +Aug 17 17:43:38 willow fetchmail[13675]: LMTP> LHLO localhost +Aug 17 17:43:38 willow fetchmail[13675]: SMTP< 250-willow +Aug 17 17:43:38 willow fetchmail[13675]: SMTP< 250-8BITMIME +Aug 17 17:43:38 willow fetchmail[13675]: SMTP< 250-ENHANCEDSTATUSCODES +Aug 17 17:43:38 willow fetchmail[13675]: SMTP< 250-PIPELINING +Aug 17 17:43:38 willow fetchmail[13675]: SMTP< 250-SIZE +Aug 17 17:43:38 willow fetchmail[13675]: SMTP< 250-AUTH EXTERNAL +Aug 17 17:43:38 willow fetchmail[13675]: SMTP< 250 IGNOREQUOTA +Aug 17 17:43:38 willow fetchmail[13675]: forwarding to +/var/imap/socket/lmtp +Aug 17 17:43:38 willow fetchmail[13675]: LMTP> MAIL +FROM:<linux-kernel-owner+lkml=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">40dgreaves.com-S268306AbUHQPkZ at vger.kernel.org</A>> +SIZE=9060 +Aug 17 17:43:38 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:38 willow fetchmail[13675]: LMTP< 250 2.1.0 ok +Aug 17 17:43:38 willow fetchmail[13675]: LMTP> RCPT +TO:<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A>> +Aug 17 17:43:38 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:38 willow fetchmail[13675]: LMTP< 250 2.1.5 ok +Aug 17 17:43:38 willow fetchmail[13675]: LMTP> DATA +Aug 17 17:43:38 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:38 willow fetchmail[13675]: LMTP< 354 go ahead +********************************************************************************************************************************************************************Aug +17 17:43:38 willow fetchmail[13675]: message <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:1 +was not the expected length (9317 actual != 9060 expected) +Aug 17 17:43:38 willow fetchmail[13675]: LMTP>. (EOM) +Aug 17 17:43:38 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:38 willow fetchmail[13675]: LMTP< 250 2.1.5 Ok +Aug 17 17:43:38 willow fetchmail[13675]: flushed +Aug 17 17:43:38 willow fetchmail[13675]: POP3> DELE 1^M +Aug 17 17:43:38 willow fetchmail[13675]: POP3< +OK Done. +Aug 17 17:43:38 willow fetchmail[13675]: POP3> LIST 2 +Aug 17 17:43:38 willow fetchmail[13675]: POP3< +OK 2 5098 +Aug 17 17:43:38 willow fetchmail[13675]: POP3> RETR 2 +Aug 17 17:43:39 willow fetchmail[13675]: POP3< +OK Message follows +Aug 17 17:43:39 willow fetchmail[13675]: reading message +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:2 of 33 (5098 octets) +Aug 17 17:43:39 willow fetchmail[13675]: About to rewrite Return-Path: +<linux-kernel-owner+lkml=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">40dgreaves.com-S268293AbUHQPhg at vger.kernel.org</A>>^M +Rewritten version is Return-Path: +<linux-kernel-owner+lkml=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">40dgreaves.com-S268293AbUHQPhg at vger.kernel.org</A>>^M +#****************************************************************Aug +17 17:43:39 willow fetchmail[13675]: About to rewrite From: Christoph +Hellwig <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">hch at infradead.org</A>>^M Rewritten version is From: Christoph +Hellwig <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">hch at infradead.org</A>>^M +Aug 17 17:43:39 willow fetchmail[13675]: About to rewrite To: Markus +Lidel <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">Markus.Lidel at shadowconnect.com</A>>^M Rewritten version is To: +Markus Lidel <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">Markus.Lidel at shadowconnect.com</A>>^M +Aug 17 17:43:39 willow fetchmail[13675]: About to rewrite Cc: +Christoph Hellwig <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">hch at infradead.org</A>>,^M ^IWarren Togami +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">wtogami at redhat.com</A>>, <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel at vger.kernel.org</A>^M Rewritten version +is Cc: Christoph Hellwig <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">hch at infradead.org</A>>,^M ^IWarren Togami +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">wtogami at redhat.com</A>>, <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel at vger.kernel.org</A>^M +Aug 17 17:43:39 willow fetchmail[13675]: About to rewrite Sender: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel-owner at vger.kernel.org</A>^M Rewritten version is Sender: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">linux-kernel-owner at vger.kernel.org</A>^M +Aug 17 17:43:39 willow fetchmail[13675]: forwarding to +/var/imap/socket/lmtp +Aug 17 17:43:39 willow fetchmail[13675]: LMTP> MAIL +FROM:<linux-kernel-owner+lkml=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">40dgreaves.com-S268293AbUHQPhg at vger.kernel.org</A>> +SIZE=5098 +Aug 17 17:43:39 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:39 willow fetchmail[13675]: LMTP< 250 2.1.0 ok +Aug 17 17:43:39 willow fetchmail[13675]: LMTP> RCPT +TO:<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A>> +Aug 17 17:43:39 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:39 willow fetchmail[13675]: LMTP< 250 2.1.5 ok +Aug 17 17:43:39 willow fetchmail[13675]: LMTP> DATA +Aug 17 17:43:39 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:39 willow fetchmail[13675]: LMTP< 354 go ahead +Aug 17 17:43:39 willow fetchmail[13675]: message +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:2 was not the expected length (5209 actual != +5098 expected) +Aug 17 17:43:39 willow fetchmail[13675]: LMTP>. (EOM) +Aug 17 17:43:39 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:39 willow fetchmail[13675]: LMTP< 250 2.1.5 Ok +Aug 17 17:43:39 willow fetchmail[13675]: flushed +Aug 17 17:43:39 willow fetchmail[13675]: POP3> DELE 2^M +Aug 17 17:43:39 willow fetchmail[13675]: POP3< +OK Done. +Aug 17 17:43:39 willow fetchmail[13675]: POP3> LIST 3 +Aug 17 17:43:39 willow fetchmail[13675]: POP3< +OK 3 2147 +Aug 17 17:43:39 willow fetchmail[13675]: POP3> RETR 3 +Aug 17 17:43:40 willow fetchmail[13675]: POP3< +OK Message follows +Aug 17 17:43:40 willow fetchmail[13675]: reading message +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:3 of 33 (2147 octets) +Aug 17 17:43:40 willow fetchmail[13675]: About to rewrite Return-Path: +<reiserfs-list-return-20355-david=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves.com at namesys.com</A>>^M +Rewritten version is Return-Path: +<reiserfs-list-return-20355-david=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves.com at namesys.com</A>>^M +#********#****************************Aug 17 17:43:40 willow +fetchmail[13675]: About to rewrite From: elliott +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">aurelius at sesmail.com</A>>^M Rewritten version is From: elliott +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">aurelius at sesmail.com</A>>^M +Aug 17 17:43:40 willow fetchmail[13675]: About to rewrite To: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">reiserfs-list at namesys.com</A>^M Rewritten version is To: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">reiserfs-list at namesys.com</A>^M +Aug 17 17:43:40 willow fetchmail[13675]: forwarding to +/var/imap/socket/lmtp +Aug 17 17:43:40 willow fetchmail[13675]: LMTP> MAIL +FROM:<reiserfs-list-return-20355-david=<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves.com at namesys.com</A>> +BODY=8BITMIME SIZE=2147 +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: LMTP< 250 2.1.0 ok +Aug 17 17:43:40 willow fetchmail[13675]: LMTP> RCPT +TO:<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A>> +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: LMTP< 250 2.1.5 ok +Aug 17 17:43:40 willow fetchmail[13675]: LMTP> DATA +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: LMTP< 354 go ahead +Aug 17 17:43:40 willow fetchmail[13675]: message +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:3 was not the expected length (2194 actual != +2147 expected) +Aug 17 17:43:40 willow fetchmail[13675]: LMTP>. (EOM) +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: LMTP< 554 5.6.0 Message +contains NUL characters +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: SMTP< 220 willow ESMTP Exim +4.20 Tue, 17 Aug 2004 17:43:40 +0100 +Aug 17 17:43:40 willow fetchmail[13675]: SMTP> HELO localhost +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: SMTP< 250 willow Hello +[AdFSF0x5m0a0vDWoZf1oPXMI8ichzbi7] at localhost.localdomain [127.0.0.1] +Aug 17 17:43:40 willow fetchmail[13675]: SMTP> MAIL +FROM:<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">FETCHMAIL-DAEMON at willow.dgreaves.com</A>> +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: SMTP< 250 OK +Aug 17 17:43:40 willow fetchmail[13675]: SMTP> RCPT +TO:<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A>> +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: SMTP< 250 Accepted +Aug 17 17:43:40 willow fetchmail[13675]: SMTP> DATA +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: SMTP< 354 Enter message, +ending with "." on a line by itself +Aug 17 17:43:40 willow fetchmail[13675]: SMTP: (bounce-message body) +Aug 17 17:43:40 willow fetchmail[13675]: SMTP>. (EOM) +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: SMTP< 250 OK id=1Bx73k-0003Ya-FK +Aug 17 17:43:40 willow fetchmail[13675]: SMTP> QUIT +Aug 17 17:43:40 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:40 willow fetchmail[13675]: SMTP< 221 willow closing +connection +Aug 17 17:43:40 willow fetchmail[13675]: flushed +Aug 17 17:43:40 willow fetchmail[13675]: POP3> DELE 3^M +Aug 17 17:43:40 willow fetchmail[13675]: POP3< +OK Done. +Aug 17 17:43:40 willow fetchmail[13675]: POP3> LIST 4 +Aug 17 17:43:40 willow fetchmail[13675]: POP3< +OK 4 4406 +Aug 17 17:43:40 willow fetchmail[13675]: POP3> RETR 4 +Aug 17 17:43:40 willow fetchmail[13675]: POP3< +OK Message follows +Aug 17 17:43:40 willow fetchmail[13675]: reading message +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:4 of 33 (4406 octets) +Aug 17 17:43:41 willow fetchmail[13675]: About to rewrite Return-Path: +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">netdev-bounce at oss.sgi.com</A>>^M Rewritten version is Return-Path: +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">netdev-bounce at oss.sgi.com</A>>^M +Aug 17 17:43:41 willow fetchmail[13675]: About to rewrite From: +Wensong Zhang <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">wensong at linux-vs.org</A>>^M Rewritten version is From: +Wensong Zhang <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">wensong at linux-vs.org</A>>^M +Aug 17 17:43:41 willow fetchmail[13675]: About to rewrite To: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">netdev at oss.sgi.com</A>^M Rewritten version is To: <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">netdev at oss.sgi.com</A>^M +Aug 17 17:43:41 willow fetchmail[13675]: About to rewrite Cc: Julian +Anastasov <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">ja at ssi.bg</A>>^M Rewritten version is Cc: Julian Anastasov +<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">ja at ssi.bg</A>>^M +Aug 17 17:43:41 willow fetchmail[13675]: About to rewrite Sender: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">netdev-bounce at oss.sgi.com</A>^M Rewritten version is Sender: +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">netdev-bounce at oss.sgi.com</A>^M +Aug 17 17:43:41 willow fetchmail[13675]: forwarding to +/var/imap/socket/lmtp +Aug 17 17:43:41 willow fetchmail[13675]: SMTP> MAIL +FROM:<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">netdev-bounce at oss.sgi.com</A>> SIZE=4406 +Aug 17 17:43:41 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:41 willow fetchmail[13675]: SMTP< 250 2.1.0 ok +Aug 17 17:43:41 willow fetchmail[13675]: SMTP> RCPT +TO:<<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A>> +Aug 17 17:43:41 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:41 willow fetchmail[13675]: SMTP< 250 2.1.5 ok +Aug 17 17:43:41 willow fetchmail[13675]: SMTP> DATA +Aug 17 17:43:41 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:41 willow fetchmail[13675]: SMTP< 354 go ahead +*******************************************************Aug 17 17:43:41 +willow fetchmail[13675]: message <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>:4 was not the +expected length (4533 actual != 4406 expected) +Aug 17 17:43:41 willow fetchmail[13675]: SMTP>. (EOM) +Aug 17 17:43:41 willow fetchmail[13675]: SMTP_ok loop start +Aug 17 17:43:41 willow fetchmail[13675]: SMTP< 250 2.1.5 Ok + +## 5 minute hang + +Aug 17 17:48:41 willow fetchmail[13675]: smtp listener protocol error 2 +Aug 17 17:48:41 willow fetchmail[13675]: not flushed +Aug 17 17:48:41 willow fetchmail[13675]: POP3> LIST 5 +Aug 17 17:48:41 willow fetchmail[13675]: POP3< -ERR Client has been +idle for too long. +Aug 17 17:48:41 willow fetchmail[13675]: Client has been idle for too +long. +Aug 17 17:48:41 willow fetchmail[13675]: POP3> QUIT^M +Aug 17 17:48:41 willow fetchmail[13675]: client/server protocol error +while fetching from pop3.ukfsn.org +Aug 17 17:48:41 willow fetchmail[13675]: 6.2.5 querying pop3.ukfsn.org +(protocol POP3) at Tue 17 Aug 2004 05:48:41 PM BST: poll completed +Aug 17 17:48:41 willow fetchmail[13675]: Query status=4 (PROTOCOL) + +# ./fetchmail -V -v -v -f /etc/fetchmailrc +This is fetchmail release 6.2.5+NLS +Fallback MDA: (none) +Linux willow 2.6.6 #1 Wed Jun 2 12:15:21 BST 2004 i586 unknown +Taking options from command line and /etc/fetchmailrc +Idfile is /var/run/fetchmail.ids +Progress messages will be logged via syslog +Fetchmail will show progress dots even in logfiles. +Fetchmail will forward misaddressed multidrop messages to +<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com.</A> +Fetchmail will direct error mail to the postmaster. +Options for retrieving from <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">dgreaves at pop3.ukfsn.org</A>: +~ True name of server is pop3.ukfsn.org. +~ This host will be queried when no host is specified. +~ Password = "xxxxxx". +~ Protocol is POP3 (using default port). +~ All available authentication methods will be tried. +~ Server nonresponse timeout is 300 seconds (default). +~ Default mailbox selected. +~ All messages will be retrieved (--all on). +~ Fetched messages will not be kept on the server (--keep off). +~ Old messages will not be flushed before message retrieval (--flush +off). +~ Rewrite of server-local addresses is enabled (--norewrite off). +~ Carriage-return stripping is disabled (stripcr off). +~ Carriage-return forcing is disabled (forcecr off). +~ Interpretation of Content-Transfer-Encoding is enabled (pass8bits off). +~ MIME decoding is disabled (mimedecode off). +~ Idle after poll is disabled (idle off). +~ Nonempty Status lines will be kept (dropstatus off) +~ Delivered-To lines will be kept (dropdelivered off) +~ No received-message limit (--fetchlimit 0). +~ Fetch message size limit is 100 (--fetchsizelimit 100). +~ Do binary search of UIDs during 9 out of 10 polls (--fastuidl 10). +~ No SMTP message batch limit (--batchlimit 0). +~ Deletion interval between expunges forced to 5 (--expunge 5). +~ Messages will be LMTP-forwarded to: /var/imap/socket/lmtp +~ Recognized listener spam block responses are: 571 550 501 554 +~ No pre-connection command. +~ No post-connection command. +~ Single-drop mode: 1 local name(s) recognized. +~ <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">david at dgreaves.com</A> +~ No interface requirement specified. +~ No monitor interface specified. +~ No plugin command specified. +~ No plugout command specified. +~ 1 UIDs saved. +~ 0bcc1e7633bb91ec04fbf4e1505b377d +~ Poll trace information will be added to the Received header. + +other account info removed + +David Greaves + + + + + + +</PRE> + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="000152.html">[fetchmail-devel] Not Yet Reviewed Queue is Empty! +</A></li> + <LI>Next message: <A HREF="000155.html">[fetchmail-devel] warning message charset fix: progress indicator 1/3. +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#154">[ date ]</a> + <a href="thread.html#154">[ thread ]</a> + <a href="subject.html#154">[ subject ]</a> + <a href="author.html#154">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">More information about the fetchmail-devel +mailing list</a><br> +</body></html> diff --git a/archived-messages/000308.html b/archived-messages/000308.html new file mode 100644 index 00000000..42ef3667 --- /dev/null +++ b/archived-messages/000308.html @@ -0,0 +1,109 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> +<HTML> + <HEAD> + <TITLE> [fetchmail-users] After reading the FAQ, a question about lost/mangled attachments + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:fetchmail-users%40lists.berlios.de?Subject=Re%3A%20%5Bfetchmail-users%5D%20After%20reading%20the%20FAQ%2C%20a%20question%20about%0A%09lost/mangled%20attachments&In-Reply-To=%3C1141822356.516.4.camel%40linux.site%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <style type="text/css"> + pre { + white-space: pre-wrap; /* css-2.1, curent FF, Opera, Safari */ + } + </style> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="000306.html"> + <LINK REL="Next" HREF="000309.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[fetchmail-users] After reading the FAQ, a question about lost/mangled attachments</H1> + <B>Peter N. Spotts</B> + <A HREF="mailto:fetchmail-users%40lists.berlios.de?Subject=Re%3A%20%5Bfetchmail-users%5D%20After%20reading%20the%20FAQ%2C%20a%20question%20about%0A%09lost/mangled%20attachments&In-Reply-To=%3C1141822356.516.4.camel%40linux.site%3E" + TITLE="[fetchmail-users] After reading the FAQ, a question about lost/mangled attachments">pspotts at alum.mit.edu + </A><BR> + <I>Wed Mar 8 13:52:36 CET 2006</I> + <P><UL> + <LI>Previous message: <A HREF="000306.html">[fetchmail-users] After reading the FAQ, a question about lost/mangled attachments +</A></li> + <LI>Next message: <A HREF="000309.html">[fetchmail-users] After reading the FAQ, a question about lost/mangled attachments +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#308">[ date ]</a> + <a href="thread.html#308">[ thread ]</a> + <a href="subject.html#308">[ subject ]</a> + <a href="author.html#308">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>On Sat, 2006-03-04 at 19:31 +0100, Matthias Andree wrote: +><i> "Peter N. Spotts" <<A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-users">pspotts at alum.mit.edu</A>> writes: +</I>><i> +</I>><i> > I've been running fetchmail on SuSE 10.0 on my laptop, and until today +</I>><i> > (when I installed the latest version of fetchmail) I've been running +</I>><i> > 6.2.X. +</I>><i> +</I>><i> [...] +</I>><i> +</I>><i> > So although my ISP is Comcast (I noted the Comcast caveats on +</I>><i> > the FAQ page), Comcast does not seem to be the problem either. +</I>><i> +</I>><i> That would be news. +</I>><i> +</I>><i> fetchmail, beginning with version 6.3.2, recognizes Comcast's broken +</I>><i> servers ("Maillennium POP3/PROXY server") and disables the problematic +</I>><i> use of the TOP command and uses RETR instead - so updating to 6.3.2 +</I>><i> should have fixed all known Comcast problems. +</I>><i> +</I>><i> -- +</I>><i> Matthias Andree +</I> +Matthias, + +My apologies for the tardy reply. I'll remove the fetchall command from +my rc file and see how things work. I should have said earlier that I +had just updated to 6.3.2 that morning but hadn't tried it yet...I just +had this urge to write something after several weeks of +frustration! ;-) + +With best regards, + +Pete +-- + + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + Peter N. Spotts | Science Correspondent + The Christian Science Monitor + One Norway Street, Boston MA 02115 + Office: 617-450-2449 | Office in home: 508-520-3139 + Email: <A HREF="https://lists.berlios.de/mailman/listinfo/fetchmail-users">pspotts at alum.mit.edu</A> | www.csmonitor.com + Amateur-radio call - KC1JB + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +"The knack of flying is to throw yourself at the ground and miss." + -- Douglas Adams + + + +</PRE> + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="000306.html">[fetchmail-users] After reading the FAQ, a question about lost/mangled attachments +</A></li> + <LI>Next message: <A HREF="000309.html">[fetchmail-users] After reading the FAQ, a question about lost/mangled attachments +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#308">[ date ]</a> + <a href="thread.html#308">[ thread ]</a> + <a href="subject.html#308">[ subject ]</a> + <a href="author.html#308">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://lists.berlios.de/mailman/listinfo/fetchmail-users">More information about the fetchmail-users +mailing list</a><br> +</body></html> diff --git a/archived-messages/000887.html b/archived-messages/000887.html new file mode 100644 index 00000000..a8398caa --- /dev/null +++ b/archived-messages/000887.html @@ -0,0 +1,105 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> +<HTML> + <HEAD> + <TITLE> [fetchmail-devel] Security vulnerability in APOP authentication + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:fetchmail-devel%40lists.berlios.de?Subject=Re%3A%20%5Bfetchmail-devel%5D%20Security%20vulnerability%20in%20APOP%20authentication&In-Reply-To=%3Cqlkbqirheq7.fsf%40clipper.ens.fr%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <style type="text/css"> + pre { + white-space: pre-wrap; /* css-2.1, curent FF, Opera, Safari */ + } + </style> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="000884.html"> + <LINK REL="Next" HREF="000889.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[fetchmail-devel] Security vulnerability in APOP authentication</H1> + <B>Gaëtan LEURENT</B> + <A HREF="mailto:fetchmail-devel%40lists.berlios.de?Subject=Re%3A%20%5Bfetchmail-devel%5D%20Security%20vulnerability%20in%20APOP%20authentication&In-Reply-To=%3Cqlkbqirheq7.fsf%40clipper.ens.fr%3E" + TITLE="[fetchmail-devel] Security vulnerability in APOP authentication">gaetan.leurent at ens.fr + </A><BR> + <I>Wed Mar 14 15:55:08 CET 2007</I> + <P><UL> + <LI>Previous message: <A HREF="000884.html">[fetchmail-devel] Bug#413059: --sslcheck - non-existent option in the man page +</A></li> + <LI>Next message: <A HREF="000889.html">[fetchmail-devel] Security vulnerability in APOP authentication +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#887">[ date ]</a> + <a href="thread.html#887">[ thread ]</a> + <a href="subject.html#887">[ subject ]</a> + <a href="author.html#887">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>Hello, + +I found a security vulnerability in the APOP authentication. It is +related to recent collision attacks by Wang and al. against MD5. The +basic idea is to craft a pair of message-ids that will collide in the +APOP hash if the password begins in a specified way. So the attacker +would impersonate a POP server, and send these msg-id; the client will +return the hash, and the attacker can learn some password characters. + +The msg-ids will be generated from a MD5 collision: if you have two +colliding messages for MD5 "<????@????>x" and "<¿¿¿¿@¿¿¿¿>x", and the +message are of length two blocks, then you will use "<????@????>" and +"<¿¿¿¿@¿¿¿¿>" as msg-ids. When the client computes MD5(msg-id||passwd) +with these two, it will collide if the first password character if 'x', +no matter what is next (since we are at a block boundary, and the end of +the password will be the same in the two hashs). Therefore you can +learn the password characters one by one (actually you can only recover +three of them, due to the way MD5 collisions are computed). + +This attack is really a practical one: it needs about an hour of +computation and a few hundred authentications from the client, and can +recover three password characters. I tested it against fetchmail, and +it does work. + +However, using the current techniques available to attack MD5, the +msg-ids sent by the server can easily be distinguished from genuine ones +as they will not respect the RFC specification. In particular, they +will contain non-ASCII characters. Therefore, as a security +countermeasure, I think fetchmail should reject msg-ids that does not +conform to the RFC. + +The details of the attack and the new results against MD5 needed to +build it will be presented in the Fast Software Encryption conference on +March 28. I can send you some more details if needed. + +Meanwhile, feel free to alert any one that you believe is concerned. +I am already sending this mail to the maintainers of Thunderbird, +Evolution, fetchmail, and mutt. KMail already seems to do enough checks +on the msg-id to avoid the attack. + +Please CC me in any reply. + +-- +Gaëtan LEURENT + +</PRE> + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="000884.html">[fetchmail-devel] Bug#413059: --sslcheck - non-existent option in the man page +</A></li> + <LI>Next message: <A HREF="000889.html">[fetchmail-devel] Security vulnerability in APOP authentication +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#887">[ date ]</a> + <a href="thread.html#887">[ thread ]</a> + <a href="subject.html#887">[ subject ]</a> + <a href="author.html#887">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://lists.berlios.de/mailman/listinfo/fetchmail-devel">More information about the fetchmail-devel +mailing list</a><br> +</body></html> diff --git a/archived-messages/patch-6.3.2.1-fix-netrc-SIGSEGV.diff b/archived-messages/patch-6.3.2.1-fix-netrc-SIGSEGV.diff new file mode 100644 index 00000000..590a201d --- /dev/null +++ b/archived-messages/patch-6.3.2.1-fix-netrc-SIGSEGV.diff @@ -0,0 +1,46 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> +<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> +<head> +<title>Object not found!</title> +<link rev="made" href="mailto:berlios-admin@berlios.de" /> +<style type="text/css"><!--/*--><![CDATA[/*><!--*/ + body { color: #000000; background-color: #FFFFFF; } + a:link { color: #0000CC; } + p, address {margin-left: 3em;} + span {font-size: smaller;} +/*]]>*/--></style> +</head> + +<body> +<h1>Object not found!</h1> +<p> + + + The requested URL was not found on this server. + + + + If you entered the URL manually please check your + spelling and try again. + + + +</p> +<p> +If you think this is a server error, please contact +the <a href="mailto:berlios-admin@berlios.de">webmaster</a>. + +</p> + +<h2>Error (none)</h2> +<address> + <a href="/">download.berlios.de</a><br /> + + <span>Wed May 21 22:24:15 2014<br /> + Apache</span> +</address> +</body> +</html> + diff --git a/configure.ac b/configure.ac index 5efd8d1a..bdcbb20c 100644 --- a/configure.ac +++ b/configure.ac @@ -9,7 +9,7 @@ dnl Process this file with autoconf to produce a configure script. dnl dnl XXX - if bumping version here, check fetchmail.man, too! -AC_INIT([fetchmail],[6.3.26],[fetchmail-users@lists.berlios.de]) +AC_INIT([fetchmail],[6.3.27],[fetchmail-users@lists.sourceforge.net]) AC_CONFIG_SRCDIR([fetchmail.h]) AC_CONFIG_HEADERS([config.h]) AC_CONFIG_LIBOBJ_DIR([.]) diff --git a/contrib/README.mold_remover b/contrib/README.mold_remover index 09adddc0..bb650bf9 100644 --- a/contrib/README.mold_remover +++ b/contrib/README.mold_remover @@ -1,7 +1,7 @@ Mold Remover Mold Remover is a short python script which integrates with fetchmail -<http://fetchmail.berlios.de/> and allows the user to specify the +<http://fetchmail.sourceforge.net/> and allows the user to specify the number of days that mail should remain on the pop3 server before being deleted. diff --git a/dist-tools/makerelease.pl b/dist-tools/makerelease.pl index f07af094..d7a49cfc 100755 --- a/dist-tools/makerelease.pl +++ b/dist-tools/makerelease.pl @@ -6,8 +6,8 @@ # my $project = "fetchmail"; -my $website = "http://developer.berlios.de/projects/$project"; -my $mailfrom = "<$project-devel\@lists.berlios.de> (Fetchmail Development Team)"; +my $website = "http://sourceforge.net/projects/$project"; +my $mailfrom = "<$project-devel\@lists.sourceforge.net> (Fetchmail Development Team)"; my $distsufx = '.tar.bz2'; my $xzsufx = '.tar.xz'; @@ -195,10 +195,6 @@ print "=== local\n"; system("cp", "autobuild/$project-$version$xzsufx", "autobuild/$project-$version$xzsufx.asc", "$ENV{HOME}/public_html/fetchmail/") and die "Cannot upload to \$HOME/public_html/fetchmail/: $!"; -print "=== berlios\n"; - -system("lftp -e \"lcd autobuild ; mput $project-$version$distsufx $project-$version$distsufx.asc ; quit\" ftp.berlios.de:/incoming/") and warn "Upload to berlios failed: $!"; - print "=== sourceforge \n"; system("rsync -acvHP autobuild/$project-$version$xzsufx autobuild/$project-$version$xzsufx.asc autobuild/README m-a\@frs.sourceforge.net:/home/frs/project/fetchmail/branch_6.3/"); unlink 'autobuild/README' or die "cannot unlink autobuild/README: $!"; diff --git a/dist-tools/test/test-request b/dist-tools/test/test-request index 56c31be7..c25e44e9 100644 --- a/dist-tools/test/test-request +++ b/dist-tools/test/test-request @@ -1,8 +1,7 @@ I maintain an open-source POP and IMAP client called fetchmail. It is widely used in the Linux and open-source community, and is probably the single most popular remote-mail client in that world. You can -find out more about this project at -<http://fetchmail.berlios.de/>. +find out more about this project at <http://fetchmail.sourceforge.net/>. In order to be able to do thorough regression testing before each release, I collect test accounts on as many different kinds of POP3, IMAP, and diff --git a/fetchmail-EN-2010-03.txt b/fetchmail-EN-2010-03.txt index 9895a582..42e32429 100644 --- a/fetchmail-EN-2010-03.txt +++ b/fetchmail-EN-2010-03.txt @@ -6,7 +6,7 @@ fetchmail-EN-2010-03: fetchmail SASL bugs prevent successful authentication Topics: Authentication incapability in older fetchmail versions Author: Matthias Andree -Version: 1.0 +Version: 1.1 Announced: 2010-10-16 Impact: Denial of service @@ -29,6 +29,7 @@ Corrected: 2010-10-09 Git, required commit: ================== 2010-10-16 1.0 complete +2014-05-21 1.1 update BerliOS links 1. Background @@ -78,7 +79,7 @@ and all previous releases. Install fetchmail release 6.3.18 or newer. The fetchmail source code is always available from -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. Since the changes are non-trivial, 6.3.18 contains other unrelated important fixes (such as applying timeout to the authentication phase, @@ -87,7 +88,7 @@ have been tested, no separate patch is made available. For details on what else changed in release 6.3.18, please see the NEWS file shipping with fetchmail 6.3.18, or its online copy at -<http://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=17957>. +<http://sourceforge.net/projects/fetchmail/files/branch_6.3/> 4. Workaround @@ -125,7 +126,7 @@ Use the information herein at your own risk. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/YgsACgkQvmGDOQUufZWwQwCgvBxomOVufQuUh96nEq95Mnz4 -5m8AoKkBIERmVh9MzN4aJBKbqRQX+2Hq -=GwOi +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZWdAQCfYcPWZiMcEl9H2SXKf80eMktw +Wc8AoNt/rtXWGD/FpPvhlBSr95eO6PF1 +=5MPV -----END PGP SIGNATURE----- diff --git a/fetchmail-FAQ.html b/fetchmail-FAQ.html index 14951a34..429d80ca 100644 --- a/fetchmail-FAQ.html +++ b/fetchmail-FAQ.html @@ -42,7 +42,7 @@ case you need the new option.</p> <p>If you have a question or answer you think ought to be added to this FAQ list, file it to one of the trackers at <a - href="http://developer.berlios.de/projects/fetchmail/">our BerliOS + href="http://sourceforge.net/projects/fetchmail/">our BerliOS project site</a> or post to one of the fetchmail mailing lists (see below).</p> @@ -353,7 +353,7 @@ save us both time if you upgrade and test with <a href="#G2">the latest <p>Bugs will be fixed, provided you include enough diagnostic information for me to go on. Send bugs to <a -href="mailto:fetchmail-users@lists.berlios.de">fetchmail-users</a>. +href="mailto:fetchmail-users@lists.sourceforge.net">fetchmail-users</a>. When sending bugs or asking for help, please <strong>do not make up information except your password</strong> and please <strong>report</strong> the following:</p> @@ -388,8 +388,8 @@ any suspicion that the bug was triggered by a particular message, please include a copy of the message that triggered the bug.</p> <p>If your bug is something that used to work but stopped working -when you upgraded, then you can help pin the bug down by trying <a -href="http://download.berlios.de/fetchmail/">intermediate versions +when you upgraded, then you can help pin the bug down by bisecting, i. e. trying <a +href="http://sourceforge.net/p/fetchmail/git/ci/legacy_63/tree/">intermediate versions of fetchmail</a> until you identify the revision that broke your feature. The smart way to do this is by binary search on the version sequence. First, try the version halfway between your last @@ -489,20 +489,20 @@ spare time of developers permitting.</p> tips?</a></h2> <p>There is a fetchmail-users list -<fetchmail-users@lists.berlios.de> +<fetchmail-users@lists.sourceforge.net> for bug reports and people who want to discuss configuration issues of fetchmail. Please see <a href="#G3">G3 above for information you need to report.</a> It's a Mailman list, see <a - href="http://lists.berlios.de/mailman/listinfo/fetchmail-users">http://lists.berlios.de/mailman/listinfo/fetchmail-users</a> + href="http://lists.sourceforge.net/mailman/listinfo/fetchmail-users">http://lists.sourceforge.net/mailman/listinfo/fetchmail-users</a> for info and subscription.</p> <p>There is a fetchmail-devel list -<fetchmail-devel@lists.berlios.de> for people who want to discuss +<fetchmail-devel@lists.sourceforge.net> for people who want to discuss fixes and improvements in fetchmail and help co-develop it. It's a Mailman list, which you can sign up for at <a -href="http://lists.berlios.de/mailman/listinfo/fetchmail-devel">http://lists.berlios.de/mailman/listinfo/fetchmail-devel</a>.</p> +href="http://lists.sourceforge.net/mailman/listinfo/fetchmail-devel">http://lists.sourceforge.net/mailman/listinfo/fetchmail-devel</a>.</p> <p>There is also an announcements-only list, -<fetchmail-announce@lists.berlios.de>, which you can sign up for at <a -href="http://lists.berlios.de/mailman/listinfo/fetchmail-announce">http://lists.berlios.de/mailman/listinfo/fetchmail-announce</a>.</p> +<fetchmail-announce@lists.sourceforge.net>, which you can sign up for at <a +href="http://lists.sourceforge.net/mailman/listinfo/fetchmail-announce">http://lists.sourceforge.net/mailman/listinfo/fetchmail-announce</a>.</p> <h2><a id="G7" name="G7">G7. So, what's this I hear about a fetchmail paper?</a></h2> diff --git a/fetchmail-SA-2005-01.txt b/fetchmail-SA-2005-01.txt index 754e6dc0..0f634698 100644 --- a/fetchmail-SA-2005-01.txt +++ b/fetchmail-SA-2005-01.txt @@ -16,7 +16,7 @@ Danger: high: in sensitive configurations, a full system (for 6.2.5.1: denial of service for the whole fetchmail system is possible) CVE Name: CVE-2005-2335 -URL: http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt +URL: http://fetchmail.sourceforge.net/fetchmail-SA-2005-01.txt http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=212762 http://www.vuxml.org/freebsd/3497d7be-2fef-45f4-8162-9063751b573a.html http://www.vuxml.org/freebsd/3f4ac724-fa8b-11d9-afcf-0060084a00e5.html @@ -103,11 +103,11 @@ No reasonable workaround can be offered at this time. Upgrade your fetchmail package to version 6.3.0 or newer. -<http://developer.berlios.de/project/showfiles.php?group_id=1824> +<http://sourceforge.net/projects/fetchmail/files/> A. References -fetchmail home page: <http://fetchmail.berlios.de/> +fetchmail home page: <http://fetchmail.sourceforge.net/> B. Copyright, License and Warranty @@ -134,7 +134,7 @@ END OF fetchmail-SA-2005-01.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZVgGgCfer/s64xaU71GiAQ6bpu5Lrei -ysgAnj2MQhFOxIzzw7V9qyp095NotaOO -=uLfy +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZWmcQCdGrMPh1DY+Uqi5gmRbL+uUsOd +BpQAn3pBsk4fCeMY61d2ltjcp+CXj8Bi +=WTmI -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2005-02.txt b/fetchmail-SA-2005-02.txt index d46275e2..64e614b9 100644 --- a/fetchmail-SA-2005-02.txt +++ b/fetchmail-SA-2005-02.txt @@ -14,7 +14,7 @@ Danger: medium Credits: Thomas Wolff, Miloslav Trmac for pointing out that fetchmailconf 1.43.1 was also flawed CVE Name: CVE-2005-3088 -URL: http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt +URL: http://fetchmail.sourceforge.net/fetchmail-SA-2005-02.txt Affects: fetchmail version 6.2.5.2 fetchmail version 6.2.5 @@ -74,12 +74,12 @@ fetchmailconf has finished, you can restore your old umask. Download and install fetchmail 6.3.0 or a newer stable release from fetchmail's project site at -<http://developer.berlios.de/project/showfiles.php?group_id=1824&release_id=6617>. +<http://sourceforge.net/projects/fetchmail/files/&release_id=6617>. A. References ============= -fetchmail home page: <http://fetchmail.berlios.de/> +fetchmail home page: <http://fetchmail.sourceforge.net/> B. Copyright, License and Warranty ================================== @@ -107,7 +107,7 @@ END OF fetchmail-SA-2005-02.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZWoPgCdG1P0n27En0VPMiY3+d0NSwfy -4rgAn037UM4pEf7E94HZQOmGUR//pM6q -=q8j6 +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZUzEQCg4GOxtrGvWtdZG0NE99DMmPOY +Tb8AnixEWIjzEr7D/FYxK3Hj2nl6f+pG +=Dzx9 -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2005-03.txt b/fetchmail-SA-2005-03.txt index d6e2c4be..21c4b528 100644 --- a/fetchmail-SA-2005-03.txt +++ b/fetchmail-SA-2005-03.txt @@ -15,10 +15,10 @@ Danger: low Credits: Daniel Drake, Gentoo (bug report) Sunil Shetye (bug fix) CVE Name: CVE-2005-4348 -URL: http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt +URL: http://fetchmail.sourceforge.net/fetchmail-SA-2005-03.txt http://article.gmane.org/gmane.mail.fetchmail.user/7573 http://bugs.debian.org/343836 -Project URL: http://fetchmail.berlios.de/ +Project URL: http://fetchmail.sourceforge.net/ Affects: fetchmail version 6.2.5.4 fetchmail version 6.3.0 @@ -79,7 +79,7 @@ For sites, where multidrop mode is required, no workaround is known. Download and install fetchmail 6.3.1 or a newer stable release from fetchmail's project site at -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. The fix has also been backported to the 6.2.5.5 legacy release which is available from the same site. @@ -125,7 +125,7 @@ END OF fetchmail-SA-2005-03.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZWToACfZyLSqP8dWVIB6rX56d+Kr1sc -iXEAoNszsDwKI1O5lh7R70etYL9jAtiq -=Zz4j +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZVR6wCePBum0D/6j2Mmzc9eDttcckfu +100AoJoy6OdYYvUDCfEjjog+aAo72NXI +=L83l -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2006-01.txt b/fetchmail-SA-2006-01.txt index 672b5510..34fc765c 100644 --- a/fetchmail-SA-2006-01.txt +++ b/fetchmail-SA-2006-01.txt @@ -14,9 +14,9 @@ Impact: fetchmail crashes Danger: low Credits: Nathaniel W. Turner (bug report) CVE Name: CVE-2006-0321 -URL: http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt +URL: http://fetchmail.sourceforge.net/fetchmail-SA-2006-01.txt http://bugs.debian.org/348747 -Project URL: http://fetchmail.berlios.de/ +Project URL: http://fetchmail.sourceforge.net/ Affects: fetchmail release >= 6.3.0 fetchmail release < 6.3.2 @@ -74,7 +74,7 @@ None known at this time. Download and install fetchmail 6.3.2 or a newer stable release from fetchmail's project site at -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. 5. End of life announcement @@ -115,7 +115,7 @@ END OF fetchmail-SA-2006-01.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZVnOgCfVyOBUSVgRSjBtqzjaLwKEg0K -30YAoJiFeNUcNBO3oKfq5rMdSEeNAfGP -=Gvze +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZUBxACdHYpE68rvXlETUZb+pwr7fJ2n +dF0An2yoLVhY7KUENyxhnN57aQ0Ro6BK +=66Zk -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2006-02.txt b/fetchmail-SA-2006-02.txt index 19948947..92c189c2 100644 --- a/fetchmail-SA-2006-02.txt +++ b/fetchmail-SA-2006-02.txt @@ -14,8 +14,8 @@ Impact: fetchmail can expose cleartext password over unsecure link Danger: medium Credits: Isaac Wilcox (bug report, testing, collaboration on fix) CVE Name: CVE-2006-5867 -URL: http://fetchmail.berlios.de/fetchmail-SA-2006-02.txt -Project URL: http://fetchmail.berlios.de/ +URL: http://fetchmail.sourceforge.net/fetchmail-SA-2006-02.txt +Project URL: http://fetchmail.sourceforge.net/ Affects: fetchmail releases <= 6.3.5 fetchmail release candidates 6.3.6-rc1, -rc2, -rc3 @@ -100,7 +100,7 @@ or equivalent in the run control file. This encrypts the whole session. Download and install fetchmail 6.3.7 or a newer stable release from fetchmail's project site at -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. 5. Acknowledgments @@ -138,7 +138,7 @@ END OF fetchmail-SA-2006-02.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZVAlACglBU+3L80GdwXRplGD0jLEPYp -C8QAoJHEGU8xtgurUjt/mYiwz8u85vYY -=Io6N +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZU41wCfaHJrbV3wTOWIYY6ExBcmboy1 +BC8AoOphRY3GVah+xgHg+mOjIPQ4eXeO +=wjDV -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2006-03.txt b/fetchmail-SA-2006-03.txt index fbdd9472..844fd9f7 100644 --- a/fetchmail-SA-2006-03.txt +++ b/fetchmail-SA-2006-03.txt @@ -13,8 +13,8 @@ Impact: fetchmail aborts prematurely Danger: low Credits: Neil Hoggarth (bug report and analysis) CVE Name: CVE-2006-5974 -URL: http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt -Project URL: http://fetchmail.berlios.de/ +URL: http://fetchmail.sourceforge.net/fetchmail-SA-2006-03.txt +Project URL: http://fetchmail.sourceforge.net/ Affects: fetchmail release = 6.3.5 fetchmail release candidates 6.3.6-rc1, -rc2 @@ -63,7 +63,7 @@ Avoid the mda option and ship to a local SMTP or LMTP server instead. Download and install fetchmail 6.3.6 or a newer stable release from fetchmail's project site at -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. @@ -94,7 +94,7 @@ END OF fetchmail-SA-2006-03.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZWnJACgxlN1s2Y3gO/Nap72VG7EaAyV -PAEAoKChr5sNMsU9k9LJeYvMYOua7IC1 -=Vx/n +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZUF1wCgvRVApGvyCvrXg84xt4SLtHxe +v34AoObhRk3Q95bukkY2sAMunVkBkV1q +=IF8k -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2007-01.txt b/fetchmail-SA-2007-01.txt index 5a09c5b9..2b3c1785 100644 --- a/fetchmail-SA-2007-01.txt +++ b/fetchmail-SA-2007-01.txt @@ -13,8 +13,8 @@ Impact: password disclosure possible Danger: low Credits: Gaëtan Leurent CVE Name: CVE-2007-1558 -URL: http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt -Project URL: http://fetchmail.berlios.de/ +URL: http://fetchmail.sourceforge.net/fetchmail-SA-2007-01.txt +Project URL: http://fetchmail.sourceforge.net/ Affects: fetchmail release < 6.3.8 @@ -76,7 +76,7 @@ C. If you must continue to use APOP without SSL/TLS, then install fetchmail 6.3.8 or newer, as it is less susceptible to the attack by validating the APOP challenge more strictly to make the attack harder. The fetchmail 6.3.8 source code is available from - <http://developer.berlios.de/project/showfiles.php?group_id=1824>. + <http://sourceforge.net/projects/fetchmail/files/>. A. Copyright, License and Warranty @@ -107,7 +107,7 @@ END OF fetchmail-SA-2007-01.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZVn6wCgkC9pMA9HxXG6lgbgoixd73Tn -Cz4AoKG+qB47vhGdXSTDDXDFgMDrMJ24 -=BKzz +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZXpcQCgxzyViEuWv9/kZ6aE8PvfeEev +8ZsAoLQCAZbK1MHuP/FLeviuVOeHRxO1 +=FH2Q -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2007-02.txt b/fetchmail-SA-2007-02.txt index c48ff70d..2a916472 100644 --- a/fetchmail-SA-2007-02.txt +++ b/fetchmail-SA-2007-02.txt @@ -12,7 +12,7 @@ Type: NULL pointer dereference trigged by outside circumstances Impact: denial of service possible Danger: low CVSS V2 vector: (AV:N/AC:M/Au:N/C:N/I:N/A:C/E:?/RL:O/RC:C) - + Credits: Earl Chew CVE Name: CVE-2007-4565 URL: http://www.fetchmail.info/fetchmail-SA-2007-02.txt @@ -48,25 +48,25 @@ control) files for fetchmail. 2. Problem description and Impact ================================= -fetchmail will generate warning messages in certain circumstances and -send them to the local postmaster or the user starting it. Such warning -messages can be generated, for instance, if logging into an upstream -server fails repeatedly or if messages beyond the size limit (if +fetchmail will generate warning messages in certain circumstances and +send them to the local postmaster or the user starting it. Such warning +messages can be generated, for instance, if logging into an upstream +server fails repeatedly or if messages beyond the size limit (if configured, default: no limit) are left on the server. -If this warning message is then refused by the SMTP listener that -fetchmail is forwarding the message to, fetchmail attempts to -dereference a NULL pointer when trying to find out if it should allow a +If this warning message is then refused by the SMTP listener that +fetchmail is forwarding the message to, fetchmail attempts to +dereference a NULL pointer when trying to find out if it should allow a bounce message to be sent. -This causes fetchmail to crash and not collect further messages until it +This causes fetchmail to crash and not collect further messages until it is restarted. -Risk assessment: low. In default configuration, fetchmail will talk -through the loopback interface, that means to the SMTP server on the same -computer as it is running on. Otherwise, it will commonly be configured -to talk to trusted SMTP servers, so a compromise or misconfiguration of -a trusted or the same computer is required to exploit this problem - +Risk assessment: low. In default configuration, fetchmail will talk +through the loopback interface, that means to the SMTP server on the same +computer as it is running on. Otherwise, it will commonly be configured +to talk to trusted SMTP servers, so a compromise or misconfiguration of +a trusted or the same computer is required to exploit this problem - which usually opens up much easier ways of denying service, or worse. @@ -78,11 +78,11 @@ There are two alternatives, either of them by itself is sufficient: a. Apply the patch found in section B of this announcement to fetchmail 6.3.8, recompile and reinstall it. -b. Install fetchmail 6.3.9 or newer when it becomes available. The - fetchmail source code is available from - <http://developer.berlios.de/project/showfiles.php?group_id=1824>. +b. Install fetchmail 6.3.9 or newer when it becomes available. The + fetchmail source code is available from + <http://sourceforge.net/projects/fetchmail/files/>. -Note there are no workarounds presented here since all known workarounds +Note there are no workarounds presented here since all known workarounds are more intrusive than the actual solution. @@ -119,7 +119,7 @@ Index: sink.c +++ sink.c (revision 5119) @@ -262,7 +262,7 @@ const char *md1 = "MAILER-DAEMON", *md2 = "MAILER-DAEMON@"; - + /* don't bounce in reply to undeliverable bounces */ - - if (!msg->return_path[0] || + if (!msg || !msg->return_path[0] || @@ -131,7 +131,7 @@ END OF fetchmail-SA-2007-02.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZWWKwCfX4Ri89SzzUcXYxughs1CdnAk -Z6IAniD4DzayVUR6UxA5K1OqX1CUDOhM -=+YME +iEYEARECAAYFAlN9DK0ACgkQvmGDOQUufZWetACggVJsyo1c2oL/Fjqi9Z/myw6j +6eMAmgLJS8tWjBE7C5gdW3TLRQTUeFU8 +=9cUO -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2008-01.txt b/fetchmail-SA-2008-01.txt index 025e5b66..3b6d9313 100644 --- a/fetchmail-SA-2008-01.txt +++ b/fetchmail-SA-2008-01.txt @@ -6,7 +6,7 @@ fetchmail-SA-2008-01: Crash on large log messages in verbose mode Topics: Crash in large log messages in verbose mode. Author: Matthias Andree -Version: 1.2 +Version: 1.3 Announced: 2008-06-17 Type: Dereferencing garbage pointer triggered by outside circumstances Impact: denial of service possible @@ -28,7 +28,6 @@ Not affected: fetchmail release 6.3.9 and newer Corrected: 2008-06-24 fetchmail SVN (rev 5205) References: <https://bugzilla.novell.com/show_bug.cgi?id=354291> - <http://developer.berlios.de/patch/?func=detailpatch&patch_id=2492&group_id=1824> 0. Release history @@ -38,7 +37,8 @@ References: <https://bugzilla.novell.com/show_bug.cgi?id=354291> posted to oss-security) 2008-06-17 1.0 published on http://www.fetchmail.info/ 2008-06-17 1.1 Corrected typo in Type: above (trigged -> triggered) -2008-06-24 1.2 also fixed issue in report_complete (reported by Petr Uzel) +2008-06-24 1.2 also fixed issue in report_complete (reported by Petr Uzel) +2014-05-21 1.3 drop obsolete BerliOS link from References: in header above 1. Background @@ -90,7 +90,7 @@ a. Apply the patch found in section B of this announcement to b. Install fetchmail 6.3.9 or newer after it will have become available. The fetchmail source code is always available from - <http://developer.berlios.de/project/showfiles.php?group_id=1824>. + <http://sourceforge.net/projects/fetchmail/files/>. 4. Workaround @@ -196,7 +196,7 @@ END OF fetchmail-SA-2008-01.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZVbTACeOfZU3NVlDF675SDiVqPL4uAl -fsgAoMEqf6cpav6sDdEobMHV3UzHSOJV -=uvVR +iEYEARECAAYFAlN9DK4ACgkQvmGDOQUufZV5ygCg6VQ+GzxusnaijUWIKKu29mQy +wrMAoPHktP1LYWR3eJmoG8palU2lAM1L +=C7We -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2009-01.txt b/fetchmail-SA-2009-01.txt index eb50a9e8..f06cb1e2 100644 --- a/fetchmail-SA-2009-01.txt +++ b/fetchmail-SA-2009-01.txt @@ -85,7 +85,7 @@ a. Apply the patch found in section B of this announcement to b. Install fetchmail 6.3.11 or newer after it will have become available. The fetchmail source code is always available from - <http://developer.berlios.de/project/showfiles.php?group_id=1824>. + <http://sourceforge.net/projects/fetchmail/files/>. 4. Workaround @@ -123,9 +123,9 @@ Use the information herein at your own risk. B. Patch to remedy the problem ============================== -Note that when taking this from a GnuPG clearsigned file, the lines -starting with a "-" character are prefixed by another "- " (dash + -blank) combination. Either feed this file through GnuPG to strip them, +Note that when taking this from a GnuPG clearsigned file, the lines +starting with a "-" character are prefixed by another "- " (dash + +blank) combination. Either feed this file through GnuPG to strip them, or strip them manually. Whitespace differences can usually be ignored by invoking "patch -l", @@ -176,7 +176,7 @@ END OF fetchmail-SA-2009-01.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZUQ7ACgheMkM4k7NLg6cz8ys3jk9C/P -uxgAnRzc38wIDR+8Pio9CmDLheOcuskK -=OYqf +iEYEARECAAYFAlN9DK4ACgkQvmGDOQUufZWmFwCfUNG9bP8z+YxzM+JYN2YO8Rjr +eAQAoKa732cxnsq5vUPUdhwZs5PRSNhL +=2qIK -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2010-01.txt b/fetchmail-SA-2010-01.txt index 0d75e88a..d665d211 100644 --- a/fetchmail-SA-2010-01.txt +++ b/fetchmail-SA-2010-01.txt @@ -80,7 +80,7 @@ a. Apply the patch found in section B of this announcement to b. Install fetchmail 6.3.14 or newer after it will have become available. The fetchmail source code is always available from - <http://developer.berlios.de/project/showfiles.php?group_id=1824>. + <http://sourceforge.net/projects/fetchmail/files/>. 4. Workaround @@ -140,7 +140,7 @@ END OF fetchmail-SA-2010-01.txt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZX0pACg7jUxqFQzdhdVDXk/izXBNkfg -ZBgAnAhDK4mYPoCzoiaJhEHM6rET4W+v -=AX1N +iEYEARECAAYFAlN9DK4ACgkQvmGDOQUufZXgLgCgj6+wbZzyaLBuNZ1rhounuoTb +UCcAmgN9gAiisBhQRS1juUKx2tb/JBb1 +=uHuw -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2010-02.txt b/fetchmail-SA-2010-02.txt index f1c17b75..6dd5c377 100644 --- a/fetchmail-SA-2010-02.txt +++ b/fetchmail-SA-2010-02.txt @@ -90,7 +90,7 @@ b. Install fetchmail 6.3.17 or newer after it will have become available. (Note that the announcements may be publicly visible quite some time before the release is made, particularly for minor bugs.) The fetchmail source code is always available from - <http://developer.berlios.de/project/showfiles.php?group_id=1824>. + <http://sourceforge.net/projects/fetchmail/files/>. 4. Workaround @@ -140,15 +140,15 @@ index 6f2dbf3..dbcda32 100644 +++ b/rfc822.c @@ -25,6 +25,7 @@ MIT license. Compile with -DMAIN to build the demonstrator. #include <stdlib.h> - + #include "fetchmail.h" +#include "sdump.h" - + #ifndef MAIN #include "i18n.h" @@ -74,9 +75,10 @@ char *reply_hack( } - + #ifndef MAIN - - if (outlevel >= O_DEBUG) - - report_build(stdout, GT_("About to rewrite %.*s...\n"), @@ -157,12 +157,12 @@ index 6f2dbf3..dbcda32 100644 + report_build(stdout, GT_("About to rewrite %s...\n"), (cp = sdump(buf, BEFORE_EOL(buf)))); + xfree(cp); + } - + /* make room to hack the address; buf must be malloced */ for (cp = buf; *cp; cp++) @@ -211,9 +213,12 @@ char *reply_hack( } - + #ifndef MAIN - - if (outlevel >= O_DEBUG) - - report_complete(stdout, GT_("...rewritten version is %.*s.\n"), @@ -181,16 +181,16 @@ index fdc6f5d..9a62ee2 100644 - --- a/uid.c +++ b/uid.c @@ -20,6 +20,7 @@ - + #include "fetchmail.h" #include "i18n.h" +#include "sdump.h" - + /* * Machinery for handling UID lists live here. This is mainly to support @@ -249,8 +250,11 @@ void initialize_saved_lists(struct query *hostlist, const char *idfile) { - report_build(stdout, GT_("Old UID list from %s:"), + report_build(stdout, GT_("Old UID list from %s:"), ctl->server.pollname); - - for (idp = ctl->oldsaved; idp; idp = idp->next) - - report_build(stdout, " %s", idp->id); @@ -247,7 +247,7 @@ index fdc6f5d..9a62ee2 100644 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZVpfQCcD3U6m1MbJOFZV4FgI7e042vF -HcEAn0j6ZFwp9dh2G7PJSkN9CM0XazyJ -=JUs1 +iEYEARECAAYFAlN9DK4ACgkQvmGDOQUufZUKUACeOl0QLdcl48bttiIEOF5XKRCF +wxQAnigEIYE6BlJQ17CSjZ4KfigM3oK6 +=culN -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2011-01.txt b/fetchmail-SA-2011-01.txt index 26751311..aa811fa5 100644 --- a/fetchmail-SA-2011-01.txt +++ b/fetchmail-SA-2011-01.txt @@ -78,7 +78,7 @@ can be used as a workaround. Install fetchmail 6.3.20 or newer. The fetchmail source code is always available from -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. Distributors are encouraged to review the NEWS file and move forward to 6.3.20, rather than backport individual security fixes, because doing so @@ -135,7 +135,7 @@ END of fetchmail-SA-2011-01 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAk9/Yg4ACgkQvmGDOQUufZUICACg5GqwtyAFuOamJ3JtribzMe9U -k20AnRLlwx4HBC/Gk3AX1dWSrrQc8WYB -=GFzg +iEYEARECAAYFAlN9DK4ACgkQvmGDOQUufZWivQCgs1S3ZZHCnBN4bZHuiTwIIzmo +hzYAoOr6wu0pYwyLhoBrfkHqFotE4mp2 +=XWx6 -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2012-01.txt b/fetchmail-SA-2012-01.txt index 47d12ae5..03dc4bcd 100644 --- a/fetchmail-SA-2012-01.txt +++ b/fetchmail-SA-2012-01.txt @@ -80,7 +80,7 @@ OpenSSL versions, please see <http://www.openssl.org/~bodo/tls-cbc.txt>. Install fetchmail 6.3.22 or newer. The fetchmail source code is always available from -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. Distributors are encouraged to review the NEWS file and move forward to 6.3.22, rather than backport individual security fixes, because doing so @@ -120,7 +120,7 @@ END of fetchmail-SA-2012-01 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEUEARECAAYFAlA+h6EACgkQvmGDOQUufZVxcQCWJ4Oza6u2OtWZErSf415uBneQ -0gCfbaE1JSkrd0uXzwWDMAbBnSqY9lY= -=2BVL +iEYEARECAAYFAlN9DK4ACgkQvmGDOQUufZVCbwCgoQriSlTKD7T6wLSW/4nxvWan +sGAAnRsgZqpyHgunCA8VUlUQNKO5Z4z1 +=nvvD -----END PGP SIGNATURE----- diff --git a/fetchmail-SA-2012-02.txt b/fetchmail-SA-2012-02.txt index e0761f49..9783f696 100644 --- a/fetchmail-SA-2012-02.txt +++ b/fetchmail-SA-2012-02.txt @@ -71,7 +71,7 @@ other accounts' data. Install fetchmail 6.3.22 or newer. The fetchmail source code is always available from -<http://developer.berlios.de/project/showfiles.php?group_id=1824>. +<http://sourceforge.net/projects/fetchmail/files/>. Distributors are encouraged to review the NEWS file and move forward to 6.3.22, rather than backport individual security fixes, because doing so @@ -111,7 +111,7 @@ END of fetchmail-SA-2012-02 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) -iEYEARECAAYFAlA+n3kACgkQvmGDOQUufZWzKwCfcOJF35eJ/bOio0VRfFFOiBsq -dNwAnicBBiqQOq9i7atwBr4gdZ5x+SUM -=+hqO +iEYEARECAAYFAlN9DK4ACgkQvmGDOQUufZWDzACgkyvYcMCskG/b3cYoNKioRuZF +kZcAn0OKGe0JuS88V9lrzRYAUme27zbh +=ZMfO -----END PGP SIGNATURE----- diff --git a/fetchmail.man b/fetchmail.man index ad412a53..03f6233b 100644 --- a/fetchmail.man +++ b/fetchmail.man @@ -10,7 +10,7 @@ .\" Load www macros to process .URL requests, this requires groff: .mso www.tmac .\" -.TH fetchmail 1 "fetchmail 6.3.26" "fetchmail" "fetchmail reference manual" +.TH fetchmail 1 "fetchmail 6.3.27" "fetchmail" "fetchmail reference manual" .SH NAME fetchmail \- fetch mail from a POP, IMAP, ETRN, or ODMR-capable server @@ -62,7 +62,7 @@ env LC_ALL=C fetchmail \-vvv \-\-nodetach \-\-nosyslog (This command line actually runs fetchmail with verbose English output.) .PP Also see -.URL "http://fetchmail.berlios.de/fetchmail-FAQ.html#G3" "item #G3 in fetchmail's FAQ" +.URL "http://fetchmail.sourceforge.net/fetchmail-FAQ.html#G3" "item #G3 in fetchmail's FAQ" .PP You can omit the LC_ALL=C part above if you want output in the local language (if supported). However if you are posting to mailing lists, @@ -2914,11 +2914,11 @@ The BSMTP error handling is virtually nonexistent and may leave broken messages behind. .PP Send comments, bug reports, gripes, and the like to the -.MTO "fetchmail-devel@lists.berlios.de" "fetchmail-devel list" +.MTO "fetchmail-devel@lists.sourceforge.net" "fetchmail-devel list" .PP An -.URL "http://fetchmail.berlios.de/fetchmail-FAQ.html" "HTML FAQ" +.URL "http://fetchmail.sourceforge.net/fetchmail-FAQ.html" "HTML FAQ" is available at the fetchmail home page, it should also accompany your installation. @@ -2956,7 +2956,10 @@ Beinert, and H\['e]ctor Garc\['i]a. .BR netrc (5). .PP -.URL "http://fetchmail.berlios.de/" "The fetchmail home page." +.URL "http://www.fetchmail.info/" "The fetchmail home page." + +.PP +.URL "http://fetchmail.sourceforge.net/" "The fetchmail home page (alternative URI)." .PP .URL "http://www.courier-mta.org/maildrop/" "The maildrop home page." @@ -9,7 +9,7 @@ if [ -z "$version" ] ; then exit 1 fi -email="fetchmail-devel@lists.berlios.de" +email="fetchmail-devel@lists.sourceforge.net" packager="Fetchmail Developers <$email>" rpmver=`echo "$version" | sed 's/-/./g'` if test $rpmver = $version ; then @@ -35,7 +35,7 @@ Version: $rpmver Release: 1 Vendor: The Community Fetchmail Project Packager: $packager -URL: http://developer.berlios.de/projects/fetchmail +URL: http://sourceforge.net/projects/fetchmail Source: %{name}-${vervar}.tar.bz2 Group: Applications/Mail Group(pt_BR): Aplicações/Correio Eletrônico @@ -60,7 +60,7 @@ Summary(tr): POP2, POP3, APOP, IMAP protokolleri ile uzaktan mektup alma yazıl Summary(vi): trình nền lấy thư POP/IMAP có tính năng đầy đủ BuildRoot: %{_tmppath}/%{name}-root #Keywords: mail, client, POP3, APOP, KPOP, IMAP, ETRN, ODMR, SMTP, ESMTP, GSSAPI, RPA, NTLM, CRAM-MD5, SASL -#Destinations: fetchmail-users@lists.berlios.de, fetchmail-announce@lists.berlios.de +#Destinations: fetchmail-users@lists.sourceforge.net, fetchmail-announce@lists.sourceforge.net %description Fetchmail is a free, full-featured, robust, and well-documented remote @@ -35,7 +35,8 @@ that everyone can alter.</p> <p>POP3 hang when polling mail with NUL char that is rejected (David Greaves) <a href="https://lists.berlios.de/pipermail/fetchmail-devel/2004-October/000154.html">https://lists.berlios.de/pipermail/fetchmail-devel/2004-October/000154.html</a></p> - + <!-- David Greaves david at dgreaves.com + Wed Oct 13 14:39:33 CEST 2004 --> <p>It has been reported that multidrop name matching fails when the name to be matched contains a Latin-1 umlaut. Dollars to doughnuts this is some kind of character sign-extension problem. Trouble is, diff --git a/website/index.html b/website/index.html index b7a14530..1b3f7d5c 100644 --- a/website/index.html +++ b/website/index.html @@ -168,16 +168,16 @@ a blanket.</p> <p>There is a fetchmail-users list for help and other user discussion of fetchmail. It's a MailMan list, which you can sign up for at <a -href="http://lists.berlios.de/mailman/listinfo/fetchmail-users"> -fetchmail-users@lists.berlios.de</a>. +href="http://lists.sourceforge.net/mailman/listinfo/fetchmail-users"> +fetchmail-users@lists.sourceforge.net</a>. <br>There is also a fetchmail-devel list for people who want to discuss fixes and improvements in fetchmail and help co-develop it. That one is at <a -href="http://lists.berlios.de/mailman/listinfo/fetchmail-devel"> -fetchmail-devel@lists.berlios.de</a>. +href="http://lists.sourceforge.net/mailman/listinfo/fetchmail-devel"> +fetchmail-devel@lists.sourceforge.net</a>. <br>Finally, there is an announcements-only list, <a -href="http://lists.berlios.de/mailman/listinfo/fetchmail-announce"> -fetchmail-announce@lists.berlios.de</a>.</p> +href="http://lists.sourceforge.net/mailman/listinfo/fetchmail-announce"> +fetchmail-announce@lists.sourceforge.net</a>.</p> <h1>Maintainer History</h1> <p>Fetchmail originated as a program called <i>popclient</i>, written @@ -185,11 +185,10 @@ by Carl Harris. In 1996, <a href="http://www.catb.org/~esr/">Eric S. Raymond</a> took over; he soon renamed the program to fetchmail after adding IMAP support.</p> <p>In 2004 a new team took over, led by <a -href="http://developer.berlios.de/users/rfunk/">Rob Funk</a>, <a -href="http://developer.berlios.de/users/bob/">Graham Wilson</a>, and <a +href="http://sourceforge.net/u/robfunk/profile/">Rob Funk</a>, +Graham Wilson, and <a href="http://sourceforge.net/u/m-a/profile/">Matthias Andree</a>. Since then, -Graham Wilson has retreated, and <a -href="http://developer.berlios.de/users/shetye/">Sunil Shetye</a> has +Graham Wilson has retreated, and Sunil Shetye has contributed several important pieces of code.</p> <h1>You can help improve fetchmail:</h1> diff --git a/website/security.html b/website/security.html index 3db86537..22c1b1f2 100644 --- a/website/security.html +++ b/website/security.html @@ -27,10 +27,10 @@ <a href="fetchmail-FAQ.html" title="Fetchmail FAQ">FAQ</a><br> <a href="fetchmail-FAQ.pdf" title="Fetchmail FAQ as PDF">FAQ (PDF)</a><br> <a href="design-notes.html">Design Notes</a><br> - <a href="http://developer.berlios.de/project/showfiles.php?group_id=1824">Download</a><br> + <a href="http://sourceforge.net/projects/fetchmail/files/">Download</a><br> Security/Errata<br> <a href="http://gitorious.org/fetchmail/fetchmail/">Development</a><br> - <a href="http://developer.berlios.de/projects/fetchmail/">Project Page</a><br> + <a href="http://sourceforge.net/projects/fetchmail/">Project Page</a><br> <hr> </div> @@ -94,7 +94,7 @@ </ul> <p style="font-size:100%"><strong>Please <a - href="http://developer.berlios.de/project/showfiles.php?group_id=1824">update + href="http://sourceforge.net/projects/fetchmail/files/">update to the newest fetchmail version</a>.</strong></p> </div> </body> |