aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS
diff options
context:
space:
mode:
authorMatthias Andree <matthias.andree@gmx.de>2012-12-13 23:44:37 +0100
committerMatthias Andree <matthias.andree@gmx.de>2012-12-13 23:44:37 +0100
commit7ffec45913adc02a5c5f6a2cfe95a41d42ae535c (patch)
tree4964ef2ba7299b201f2285b987a8ed1870fadecb /NEWS
parentedb8384a00f108b385d0df7ddfa5bd671a36f946 (diff)
downloadfetchmail-7ffec45913adc02a5c5f6a2cfe95a41d42ae535c.tar.gz
fetchmail-7ffec45913adc02a5c5f6a2cfe95a41d42ae535c.tar.bz2
fetchmail-7ffec45913adc02a5c5f6a2cfe95a41d42ae535c.zip
Plug a memory leak in OpenSSL's certificate verification callback.
This would affect fetchmail configurations running with SSL in daemon mode more than one-shot runs. Reported by Erik Thiele, and pinned by Dominik, Debian Bug #688015. This bug was introduced into fetchmail 6.2.9 (committed 2005-10-29) when support for subjectAltName was added through a patch by Roland Stigge, submitted as Debian Bug#201113.
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS10
1 files changed, 9 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 0896aa2c..ea45a4c4 100644
--- a/NEWS
+++ b/NEWS
@@ -63,7 +63,15 @@ Should a 7.0 release be made earlier, chances are that the 6.3.X branch
is abandoned and its changes be folded into the 7.0 release, with changes
after 6.3.24 not available on their own in a newer 6.3.X release.
-# REGRESSION FIX
+# CRITICAL AND REGRESSION FIXES
+* Plug a memory leak in OpenSSL's certificate verification callback.
+ This would affect fetchmail configurations running with SSL in daemon mode
+ more than one-shot runs.
+ Reported by Erik Thiele, and pinned by Dominik, Debian Bug #688015.
+ This bug was introduced into fetchmail 6.2.9 (committed 2005-10-29)
+ when support for subjectAltName was added through a patch by Roland
+ Stigge, submitted as Debian Bug#201113.
+
* The --logfile option now works again outside daemon mode, reported by Heinz
Diehl. The documentation that I had been reading was inconsistent with the
code, and only parts of the manual page claimed that --logfile was only