diff options
40 files changed, 4699 insertions, 0 deletions
diff --git a/debian/NEWS b/debian/NEWS new file mode 100644 index 00000000..2e49da63 --- /dev/null +++ b/debian/NEWS @@ -0,0 +1,39 @@ +fetchmail (6.4.23-1) unstable; urgency=medium + + For common ssh-based IMAP PREAUTH setups (i. e. those that use a plugin + - no matter its contents - and that set auth ssh), change the STARTTLS + error message to suggest sslproto '' instead. + This is a commonly reported issue after the CVE-2021-39272 fix in + 6.4.22. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 11 Dec 2021 17:12:55 +0100 + +fetchmail (6.3.6~rc3-1) unstable; urgency=low + + Using at least one of the options "sslproto 'tls1'", "sslfingerprint" or + "sslcertck" enforces STARTTLS for POP3 and IMAP and terminates the connection + if unsuccessful. The same configuration causes permanent connection failure + with POP2, which is obsolete and does not support STLS. fetchmail 6.3.5 and + older had no way to enforce TLS. With those older versions, TLS was always + opportunistic, but fetchmail would happily transmit the password in cleartext + if STARTTLS failed. + Configurations using --ssl --sslcertck however have been safe. + + -- Nico Golde <nico@ngolde.de> Tue, 21 Nov 2006 17:39:37 +0100 + +fetchmail (6.3.1-1) unstable; urgency=low + + File /etc/default/fetchamil has been added to stablish if user wants to + start fetchmail on boot or not. + On install time we try to determine from old version if start or not. + Default will be to not start. + This addition is necessary since upgrades of the package while the users + hadn't finish to configure fetchmail properly were breaking the upgrade. + This had bitten quite a few users. + The fetchmail-ssl dummy package has been removed since it is no longer + needed. + Due to #327250 fetchmail home directory (/var/run/fetchmail) changed to + /var/lib/fetchmail + + -- Hector Garcia <hector@debian.org> Mon, 9 Jan 2006 23:24:29 +0100 + diff --git a/debian/README.Debian b/debian/README.Debian new file mode 100644 index 00000000..ab213ddb --- /dev/null +++ b/debian/README.Debian @@ -0,0 +1,165 @@ +Fetchmail for Debian, README file +$Id: README.Debian 228 2005-08-14 15:52:49Z nion $ + +Miscellaneous notes +------------------- + +Fetchmail wants a MTA and will not use a MDA fallback by default anymore. +Please configure it correctly for your system. + +Also, MTA return codes 552 and 553 always cause fetchmail to trash the message, +unless "keep" mode is being used. MTA return codes in the "antispam" option +list will also cause mail loss. However, this list is empty by default. + + +Build instructions +------------------ + +Make sure to run "debian/rules clean" BEFORE you try to build the package +(dpkg-buildpackage will do that for you). You have been warned. + +You can tailor the capabilities of fetchmail (e.g. to add Kerberos IV support) +by defining DEB_FETCHMAIL_BUILD_OPTIONS before building the package. There is +no need to edit debian/rules anymore. Please read the comments in debian/rules +for more information. + +Building KerberosV support using the Heimdal libs in Debian will only work in +the SSL version of fetchmail. + + +Fetchmail and losing mail +------------------------- + +POP3 servers are known to delete stored mail for no good reason, no matter what +it is told to do. Badly-configured MTAs are known to send email to the trash or +bounce it with spam return codes -- including email sent to the postmaster. And +fetchmail is known to be blamed for both these things causing mail loss. + +SEND EMAIL TO YOURSELF MANUALLY TROUGH WHICHEVER DELIVERY METHOD YOU WANT +FETCHMAIL TO SEND THROUGH, TO TEST IT BEFORE RUNNING FETCHMAIL. + +CHECK YOUR MTA AND POP3 SERVER BY TELLING FETCHMAIL NOT TO DELETE MAIL FROM +YOUR SERVER ("keep" option) NOR DELETE SPAM ("antispam -1") NOR BOUNCE MAIL +("set no bouncemail") IF YOU VALUE YOUR EMAIL. YOU HAVE BEEN WARNED. + +The above checks should be made every time you change something important in +either fetchmail's or the MTA/MDA configuration. + +Now, let's go over it once again: Fetchmail can, and will delete your mail if +it thinks the MTA is telling it to do so. Option "keep" will avoid the +deletion of messages. If you forget to tell fetchmail to "keep" messages, and +the MTA refuses delivery (particularly with codes 552 (message too large) or 553 +(invalid envelope sender), fetchmail will delete the message even when it +failed to deliver it. Setting "no bouncemail" and "antispam -1" makes such +deletion less likely. + + +Using the system-wide fetchmail +------------------------------- + +The fetchmail package install a SysV init script in /etc/init.d/fetchmail. +This script will start a fetchmail daemon running as the user fetchmail, if +the configuration file /etc/fetchmailrc is present in the system. If the +configuration file is not present, nothing is started. + +If the system-wide fetchmail refuses to start, you probably have syntax +errors in the /etc/fetchmailrc file. Try /etc/init.d/fetchmail debug-run +to find out why it is not starting. Do notice that debug-run is *not* +capable of detecting errors that happen only in daemon mode. + +By default, the system-wide fetchmail daemon will poll every 5 minutes. To +change this, add a line like the following to your /etc/fetchmailrc file: + + set daemon 900 # poll every 15 minutes + +Also, the system-wide fetchmail daemon will by default log all output to +syslog. To disable this (e.g. if you use the logfile option), add the +following to your /etc/fetchmailrc file: + + set no syslog # disable logging to syslog + + +Fetchmail on a PPP link +----------------------- + +By default, the system-wide fetchmail will start at boot, and will be +restarted when the PPP link is brought up. You, can however, configure +the system-wide fetchmail to *only* run when the PPP link is up (note +that this has no real advantage over running fetchmail all the time). To +do so, you must do four things: + + 1. Turn of fetchmail at boot. Simply rename the S99fetchmail links in + the /etc/rc?.d directories to K15fetchmail. For example: + + # cd /etc/rc2.d + # mv S99fetchmail K15fetchmail + + Under Debian, it is advised to use generic commands: + # invoke-rc.d fetchmail stop + # update-rc.d fetchmail remove + + 2. Edit the ip-up script as described in the comments. + + 3. Edit the ip-down script as describe in the comments. + + 4. Remove /etc/resolvconf/update-libc.d/fetchmail (or add an "exit 0" + line at the beginning). + +Note that both the init script and the fetchmail PPP scripts are conffiles, +so if you don't like the setup you just need to change them to your heart's +content. The changes will not be overwritten by a package upgrade without +your explicit consent. + + +Running the system-wide fetchmail as root +----------------------------------------- + +The fetchmail package no longer supports running the system-wide fetchmail +as root. To switch to the new init script facility, just move your +/root/.fetchmailrc to /etc/fetchmailrc, read the "UIDL cache" section below, +and run: + + invoke-rc.d fetchmail restart + + +The UIDL cache +-------------- + +Fetchmail has an UIDL cache it may use to track message-seen state. The +init script and ip-up scripts want this cache to be in +/var/mail/.fetchmail-UIDL-cache. Note the paths leading up to the UIDL +cache file must be readable by the fetchmail user. This should not be a +problem on a default Debian install. + + +Errors with POP3 servers +------------------------ + +If you have difficulties with your POP3 server, and fetchmail -v shows that +fetchmail is trying to use AUTH instead of USER and PASS, you can use +"auth password" to force the use of USER and PASS. Also, fetchmailconf has +a blacklist of known-bad servers, try autodetecting the server with it. + + +Reporting problems +------------------ + +Use a Debian bug-reporting tool (e.g. reportbug from the reportbug package) to +report problems. Please include a fetchmail -v -v dump showing the problem to +aid debugging. /etc/init.d/fetchmail debug-run will do that for you if you are +using the system-wide fetchmail feature (Do remember that problems that only +happen in daemon mode are NOT triggered by debug-run). + +Problems with signals (e.g. "why fetchmail aborts with SIGPIPE?") need the use +of strace for debugging. Just do: + + /etc/init.d/fetchmail debug-run strace -o /tmp/strace.out + +and the init script will run fetchmail, and store the strace output in +/tmp/strace.out. See strace(1) for more details on strace. + +WARNING: strace output may contain security-sensitive information, such as your +fetchmail passwords. You should clobber those with "*" or "X" before sending +the file to anyone, especially the Debian bug-tracking system. + + -- Nicolas Boulenguez <nicolas@debian.org>, Tue, 10 Apr 2018 15:26:22 +0200 diff --git a/debian/README.contrib b/debian/README.contrib new file mode 100644 index 00000000..9f4260dd --- /dev/null +++ b/debian/README.contrib @@ -0,0 +1,14 @@ +Fetchmail for Debian, contrib/README.Debian file +$Id: README.contrib,v 1.4 2003/06/09 14:55:57 benj Exp $ +========================================================== + +A lot of the stuff in contrib/ is NOT tailored for being run in a +Debian system, and will malfunction or break your system if not correctly +modified. If you don't know what you're doing, don't use it. I do NOT +maintain the contrib/ directory, nor does fetchmail upstream. + +I have removed some useless or outright dangerous stuff from there as +well. You can always get the complete contrib/ contents from the source +package. + + -- Benjamin Drieu <benj@debian.org> diff --git a/debian/README.source b/debian/README.source new file mode 100644 index 00000000..5ef0b722 --- /dev/null +++ b/debian/README.source @@ -0,0 +1,5 @@ +The source package uses quilt for the modifications of the upstream source. +If you want to change something it is best to use the quilt approach as +documented in + /usr/share/doc/quilt/README.source + diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 00000000..c21c4c07 --- /dev/null +++ b/debian/changelog @@ -0,0 +1,2970 @@ +fetchmail (6.4.38-1) unstable; urgency=medium + + * New upstream release. + * Use no for Rules-Requires-Root. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 03 Feb 2024 09:21:29 +0100 + +fetchmail (6.4.37-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Mon, 27 Feb 2023 18:42:46 +0100 + +fetchmail (6.4.36-1) unstable; urgency=medium + + * New upstream release. + * Move away dependency from lsb-base to sysvinit-utils. + * Update Standards-Version to 4.6.2 . + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Tue, 31 Jan 2023 20:52:14 +0100 + +fetchmail (6.4.35-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Tue, 10 Jan 2023 22:57:42 +0100 + +fetchmail (6.4.34-1) unstable; urgency=high + + * New upstream release: + - fixes a critical bug, softbounce not considered if SMTP sink returns + permanent error. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Tue, 18 Oct 2022 19:01:25 +0200 + +fetchmail (6.4.33-2) unstable; urgency=medium + + * Don't enable systemd user mail retrieval (closes: #1019549, #1019857). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 15 Sep 2022 19:22:24 +0200 + +fetchmail (6.4.33-1) unstable; urgency=medium + + * New upstream release. + * Update debhelper level to 13 . + * Update Standards-Version to 4.6.1 . + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 01 Sep 2022 17:14:27 +0200 + +fetchmail (6.4.32-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Wed, 03 Aug 2022 15:01:51 +0200 + +fetchmail (6.4.31-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 17 Jul 2022 17:46:48 +0000 + +fetchmail (6.4.30-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 28 Apr 2022 22:58:25 +0200 + +fetchmail (6.4.29-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 20 Mar 2022 13:14:05 +0100 + +fetchmail (6.4.28-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 06 Mar 2022 17:36:01 +0100 + +fetchmail (6.4.27-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 30 Jan 2022 15:50:35 +0100 + +fetchmail (6.4.26-1) unstable; urgency=medium + + * New upstream release. + * Update watch file. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Mon, 03 Jan 2022 13:30:25 +0100 + +fetchmail (6.4.25-1) unstable; urgency=medium + + * New upstream release. + * Add user systemd unit configuration file (closes: #981464). + * Document upstream ssh authentication change due to CVE-2021-39272 fix + (closes: #999606). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 11 Dec 2021 16:41:33 +0100 + +fetchmail (6.4.24-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Wed, 24 Nov 2021 18:41:23 +0100 + +fetchmail (6.4.23-1) unstable; urgency=medium + + * New upstream release. + * Update watch file. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Fri, 05 Nov 2021 18:44:07 +0100 + +fetchmail (6.4.22-1) unstable; urgency=high + + * New upstream release: + - fix CVE-2021-39272: fail to enforce STARTTLS session encryption in + some circumstances (closes: #993163). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Wed, 15 Sep 2021 19:04:31 +0200 + +fetchmail (6.4.21-1) unstable; urgency=medium + + * New upstream release. + * Fix envelope segmentation fault (closes: #992400). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Wed, 18 Aug 2021 20:00:28 +0200 + +fetchmail (6.4.16-5) unstable; urgency=medium + + * Backport upstream regression fix for 6.4.20's security (CVE-2021-36386) + fix. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Mon, 09 Aug 2021 20:06:48 +0200 + +fetchmail (6.4.16-4) unstable; urgency=high + + * Backport upstream security fix for CVE-2021-36386: denial of service or + information disclosure when logging long messages. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 29 Jul 2021 00:18:56 +0200 + +fetchmail (6.4.16-3) unstable; urgency=medium + + * Fix operation autopkgtest. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 26 Jun 2021 23:53:00 +0200 + +fetchmail (6.4.16-2) unstable; urgency=medium + + * Backport upstream fix for memory leak in timeout situation for LOGIN auth. + * Backport upstream man page update. + * Sync with Ubuntu. + + [ Bryce Harrington <bryce@canonical.com> ] + * d/t/control: Invoke upstream testsuite via make check. + * d/t/control, d/t/operation, d/t/mock-pop3-server.py: Add DEP8 test + for checking fetchmail's POP3 functionality. + (LP: #1677818) + + [ Francesco P. Lovergine <frankie@debian.org> ] + * Only pass pidfile to fetchmail in daemon mode (closes: #989929). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 24 Jun 2021 18:37:01 +0200 + +fetchmail (6.4.16-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 13 Feb 2021 08:47:50 +0100 + +fetchmail (6.4.15-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 09 Jan 2021 11:00:33 +0100 + +fetchmail (6.4.14-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 29 Nov 2020 14:29:05 +0100 + +fetchmail (6.4.13-2) unstable; urgency=medium + + * Remove forced OpenSSL version check (closes: #973472). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 19 Nov 2020 19:28:12 +0100 + +fetchmail (6.4.13-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 29 Oct 2020 06:47:13 +0100 + +fetchmail (6.4.12-1) unstable; urgency=medium + + * New upstream release. + * Update watch file. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Fri, 04 Sep 2020 17:04:47 +0200 + +fetchmail (6.4.11-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 30 Aug 2020 07:29:47 +0200 + +fetchmail (6.4.8-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Mon, 15 Jun 2020 18:35:31 +0200 + +fetchmail (6.4.6-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 31 May 2020 18:32:17 +0200 + +fetchmail (6.4.5-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 16 May 2020 10:16:46 +0000 + +fetchmail (6.4.4-1) unstable; urgency=medium + + * New upstream release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Tue, 28 Apr 2020 18:55:30 +0000 + +fetchmail (6.4.3-1) unstable; urgency=medium + + * New upstream release. + * Update watch file. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 19 Apr 2020 12:00:51 +0000 + +fetchmail (6.4.2-2) unstable; urgency=medium + + * Allow stderr on service testing. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 16 Feb 2020 15:52:30 +0000 + +fetchmail (6.4.2-1) unstable; urgency=medium + + * New upstream release. + * Sync with Ubuntu. + + [ Bryce Harrington <bryce@canonical.com> ] + * d/tests: Add basic dep8 test cases. This adds a trivial test to + verify installation of the main bits, and that the service is up + and running. Partially addresses LP #1677818 "Missing dep8 + tests", however a true fix will also test email fetching from a + (local) mail service. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 15 Feb 2020 19:03:16 +0000 + +fetchmail (6.4.2~rc3-1) unstable; urgency=medium + + * New upstream RC release. + * Update Standards-Version to 4.5.0 . + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Tue, 11 Feb 2020 21:38:49 +0000 + +fetchmail (6.4.1-1) unstable; urgency=medium + + * New upstream release: + - fix default file locations regression, + - fix regression under _FORTIFY_SOURCE where + PATH_MAX > minimal _POSIX_PATH_MAX (closes: #941308). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 28 Sep 2019 14:17:50 +0000 + +fetchmail (6.4.0-1) unstable; urgency=medium + + * New major upstream release: + - fix pidfile behavior (closes: #941129). + * Update watch file. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 28 Sep 2019 06:58:50 +0000 + +fetchmail (6.4.0~rc4-2) unstable; urgency=medium + + * Remove all parts of fetchmailconf (closes: #939522). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 05 Sep 2019 22:22:32 +0000 + +fetchmail (6.4.0~rc4-1) unstable; urgency=medium + + * New major upstream RC release. + * Remove outdated and Python 2 only fetchmailconf package (closes: #936512). + * Drop merged in patches. + * Update remaining patches. + * Remove old upgrade code from postinst. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Mon, 02 Sep 2019 18:33:18 +0000 + +fetchmail (6.4.0~rc3-1) unstable; urgency=medium + + * New major upstream RC release. + * Properly report size of mailboxes of 2 GB or above (closes: #873668). + * Update Standards-Version to 4.4.0 . + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 24 Aug 2019 16:49:45 +0000 + +fetchmail (6.4.0~rc2-1) unstable; urgency=medium + + * New major upstream RC release. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Tue, 20 Aug 2019 06:06:00 +0000 + +fetchmail (6.4.0~rc1-1) unstable; urgency=medium + + * New major upstream RC release: + - set umask properly before writing the .fetchids file (closes: #831611), + - fix clang null pointer checks to prevent potential segfaults. + * Backport fix to no longer reports System error during SSL_connect(): + Success (closes: #928916). + * Sync with Ubuntu. + + [ nick black <dankamongmen@gmail.com> ] + * Use full path for invoke-rc.d (closes: #926743). + + [ Russell Coker <russell@coker.com.au> ] + * Fix init.d script typo that breaks labelling for SE Linux + (closes: #922616). + + [ Bryce Harrington <bryce@canonical.com> ] + * TLS: set hostname for SNI. + + + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Mon, 05 Aug 2019 22:35:46 +0000 + +fetchmail (6.4.0~beta4-3) unstable; urgency=medium + + * Backport fix potential SIGSEGV in pop3_delete (closes: #921450). + * Backport native name verification for OpenSSL. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Wed, 06 Feb 2019 16:33:00 +0000 + +fetchmail (6.4.0~beta4-2) unstable; urgency=medium + + * Upload to Sid. + * Update Standards-Version to 4.3.0 . + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sun, 03 Feb 2019 15:45:40 +0000 + +fetchmail (6.4.0~beta4-1) experimental; urgency=medium + + * New major upstream beta release: + - improved TLS support (closes: #768843). + * Update watch file. + * Disable Vcs-* fields for now. + * Update debhelper level to 11: + - remove dh-autoreconf build dependency, + - remove autotools-dev build dependency, + - don't specify parallel to debhelper, + - specify restart-after-upgrade to dh_installinit . + * Update Standards-Version to 4.1.4 . + + [ Russell Coker <russell@coker.com.au> ] + * Run restorecon after creating directory from init script (closes: #752598). + + [ Nicolas Boulenguez <nicolas@debian.org> ] + * Packaging updates (closes: #895366): + - rename d/init to d/fetchmail.init, as recommended by policy, + - give standard formatting to header of 01_fetchmailconf.patch , + - remove obsolete debian/pycompat , + - fix typo in manpage, + - delegate installation of ppp and logcheck scripts to debhelper, + - delegate manpages from dh_install to more specialized + dh_installmanpages , + - install contrib files and resolvconf directly without intermediate copy + in debian/tmp , + - switch copyright to format 1.0 and add some missing licenses. + - delegate buggy installation of README.contrib to debhelper, + - per policy 4.0.0, use invoke-rc.d instead of calling /etc/init.d/* + directly, + - rules: drop paragraphe preparing unused variable CONFFLAGS , + - rules: simplify some variable affectations, + - delegate build flags stuff to dpkg-buildflags . + + [ Kevin Ryde <user42_kevin@yahoo.com.au> ] + * Let fetchmail-mode run hook after other settings (closes: #710319). + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 23 Jun 2018 15:52:22 +0000 + +fetchmail (6.3.26-3) unstable; urgency=low + + * Use short debhelper rules format. + * Update packaging to fix FTBFS if building in parallel (closes: #828299). + * Let debhelper handle invoke-rc.d and update-rc.d calls. + * Add dh-autoreconf to build dependency. + * Remove unneeded dpkg-dev build dependency. + * Update Standards-Version to 3.9.8 and debhelper level to 9 . + * Remove Nico Golde from uploaders per request. + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Thu, 03 Nov 2016 21:07:11 +0000 + +fetchmail (6.3.26-2) unstable; urgency=low + + * New maintainer (closes: #800750), keep Nico and Hector as uploaders. + * Backport upstream fix for SSLv3 removal (closes: #804604) and do not + recommend SSLv3 (closes: #801178). + * Version OpenSSL build dependency for TLSv1.2 support. + * Remove quilt from build depends and its usage. + * Add dh-python to build depends. + * Update upstream URLs. + * Update watch file. + * Update Standards-Version to 3.9.6 . + + -- Laszlo Boszormenyi (GCS) <gcs@debian.org> Sat, 03 Oct 2015 16:32:13 +0200 + +fetchmail (6.3.26-1) unstable; urgency=low + + * New upstream release. + - Fix mimedecode option dropping last message line in certain + situations (Closes: #706045). + * remove 03_fix_command_line_combination.patch and + 02_cert-verification-memleak.patch, included upstream. + * Bump standards version, no changes required. + * Change Vcs URI to canonical URI. + * Explicitly add postfix to Should-Start for LSB init script + (Closes: #631781). + * Add proper Default-Stop entries to LSB init script header. + * Simplify resolvconf script as resolvconf doesn't call scripts + anymore with --nscd (Closes: #699425). + + -- Nico Golde <nion@debian.org> Sat, 11 May 2013 12:23:25 +0200 + +fetchmail (6.3.22-2) unstable; urgency=low + + * Fix memory leak in OpenSSL's certificate varification callback. + Thanks Erik Thiele and Dominik! (Closes: #688015). + * Fix combination of --plugin and -f - (Closes: #671294). + + -- Nico Golde <nion@debian.org> Mon, 17 Dec 2012 13:04:01 +0100 + +fetchmail (6.3.22-1) unstable; urgency=low + + * New upstream release. + - Fix minor DoS in NTLM message handling (CVE-2012-3482). + - Clears SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS as a precaution + against "BEAST" attacks (CVE-2011-3389). + * Removed 03_ssl_cert_logging.patch, incorporated by upstream. + * Removed 02_fetchmail-kill-sslv2.patch, incorporated by upstream. + * Do not log disabled daemon message as warning (Closes: #672724). + * Raise standards version, no changes required. + * Add LSB description header to init script. + + -- Nico Golde <nion@debian.org> Thu, 30 Aug 2012 15:46:27 +0200 + +fetchmail (6.3.21-4) unstable; urgency=low + + * Fix building with build-arch (Closes: #671026). + + -- Nico Golde <nion@debian.org> Tue, 01 May 2012 18:56:24 +0200 + +fetchmail (6.3.21-3) unstable; urgency=low + + * Build with hardening compiler flags (Closes: #653538). + - Add Build-Depends on dpkg-dev (>= 1.16.1~). + - Use buildflags.mk snippet in debian/rules. + - Make all hardening flags default for DEB_BUILD_MAINT_OPTIONS. + * Use log_warning_msg rather than echo to inform user that the + fetchmail daemon has been disabled. + + -- Nico Golde <nion@debian.org> Thu, 29 Dec 2011 18:55:30 +0100 + +fetchmail (6.3.21-2) unstable; urgency=low + + * Do not log server certificate message to stderr in verbose mode + (Closes: #639807). + * debian/control: Drop XS-Python-Version to allow dh_python2 to create + symlinks to all supported python versions (Closes: #626100). + patch was missing in previous upload. + * Only awake fetchmail via resolvconf, if it is actually + running (Closes: #612179). + patch was broken in previous upload. + + -- Nico Golde <nion@debian.org> Sun, 04 Sep 2011 16:00:50 +0200 + +fetchmail (6.3.21-1) unstable; urgency=low + + * New upstream release + - Do not insert null byte into the last line of a message under + certain circumstances in the IMAP client (Closes: #638773). + * debian/control: Drop XS-Python-Version to allow dh_python2 to create + symlinks to all supported python versions (Closes: #626100). + * Only awake fetchmail via resolvconf, if it is actually + running (Closes: #612179). + * Adjust 02_fetchmail-kill-sslv2.patch, german po changes have been + applied by upstream. + * debian/control: extend long description for fetchmailconf. + * debian/rules: introduce new build-arch/build-indep targets. + + -- Nico Golde <nion@debian.org> Mon, 29 Aug 2011 19:20:00 +0200 + +fetchmail (6.3.19-1) unstable; urgency=low + + [Nico Golde] + * New upstream release. + * Bump standards version, no changes needed. + * Converting from python-central to dh_python2 (Closes: #616806) + - Removed python-central from dependencies + - Bump minimum python version to 2.6.6-3~ + - Removed XB-Python-Version + - Add dh_python2 call to binary-indep, remove dh_pycentral + * Removed 02_man_page.patch, changes included upstream. + * Add 02_fetchmail-kill-sslv2.patch (thanks Matthias!) to fix FTBFS + due to openssl 1.0.0 dropping ssl v2 support (Closes: #622054). + + [Hector Garcia] + * Removed the part from 01_fetchmailconf.patch where it touches + Makefile.in file and removed 03_fetchmailconf_python2.6.patch. + + -- Nico Golde <nion@debian.org> Wed, 13 Apr 2011 12:57:14 +0200 + +fetchmail (6.3.18-2) unstable; urgency=low + + * Fix python module path for fetchmailconf (Closes: #603861). + + -- Nico Golde <nion@debian.org> Wed, 01 Dec 2010 23:20:37 +0100 + +fetchmail (6.3.18-1) unstable; urgency=medium + + * New upstream release. + - Remove 03_spurious-ssl-cert-warning.patch, included upstream. + - Cancel GSSAPI authentication properly when encountering GSS + errors (Closes: #568455, #593694). + - Don't complain about READ-ONLY IMAP folders in --fetchall --keep + mode (Closes: #348995). + * Bump standards version, no changes needed. + + -- Nico Golde <nion@debian.org> Mon, 11 Oct 2010 23:53:31 +0200 + +fetchmail (6.3.17-4) unstable; urgency=low + + * Removed update-rc.d fetchmail remove (Closes: #587902, #587855). + + -- Hector Garcia <hector@debian.org> Fri, 02 Jul 2010 15:02:10 +0200 + +fetchmail (6.3.17-3) unstable; urgency=low + + * Removed stop on level 1. (Closes: #587367). + * Included doc-base information about the .html files in docs. + * Changed Conflicts for Breaks. + * Bumped standards-version to 3.9.0 + * Cleaned Makefile after configure to prevent unnecesary linking against + libcrypt and libk5crypto. + + -- Hector Garcia <hector@debian.org> Wed, 30 Jun 2010 12:41:12 +0200 + +fetchmail (6.3.17-2) unstable; urgency=low + + [Nico Golde] + * Add Should-Start and Should-Stop facilities to the init script + in order to make sure fetchmail is started after a local DNS + server and/or MTA if present. Thanks to Jan Braun and Petter + Reinholdtsen (Closes: #582475). + * Add 03_spurious-ssl-cert-warning.patch to prevent fetchmail complaining + about an insecure ssl connection even if a fingerprint that has been + obtained through a secure channel is configured (Closes: #580796). + + [Hector Garcia] + * Changed suggest of exim4 to default-mta (Closes: #586864, #586865). + * Not explicitly stop daemon on runlevel 0 and 6 (Closes: #498427). + * Make it compile against python2.6. Thanks to Steve Langasek + (Closes: #586866, #586867). + * Updated man page patch to include more minus escaped form. + + -- Nico Golde <nion@debian.org> Thu, 24 Jun 2010 13:52:43 +0200 + +fetchmail (6.3.17-1) unstable; urgency=low + + * New upstream release. + - Drop fetchmail-SA-2010-02.patch, included upstream, this + patch also introduced a regression that was fixed with this + release as well. + * Add status option to init script and incorporate changes + by Peter Eisentraut, thanks! (Closes: #527967). + - Bump lsb depedency to 3.2-13. + + -- Nico Golde <nion@debian.org> Fri, 07 May 2010 19:20:00 +0200 + +fetchmail (6.3.16-2) unstable; urgency=medium + + * Add fetchmail-SA-2010-02.patch fixing a possible DoS on invalid + multibyte sequences in message headers when used with -vv. + + -- Nico Golde <nion@debian.org> Mon, 19 Apr 2010 14:40:41 +0200 + +fetchmail (6.3.16-1) unstable; urgency=low + + * New upstream release. + - Load all SSL ciphers (Closes: #576430). + - Fix regression when using --interface (Closes: #576717). + + -- Nico Golde <nion@debian.org> Thu, 08 Apr 2010 20:03:55 +0200 + +fetchmail (6.3.15-1) unstable; urgency=low + + * New upstream release. + - Log an unexpected BYE from the server when using imap + (Closes: #140631, #215688). + * Removing Hectors NEWS entry as it was a plain copy of the changelog + (Closes: #569207). + * Remove 03_sdump_heap_overflow.patch, included upstream. + * Switch to 3.0 (quilt) source format. + * Fix incorrect version number in NEWS file: 6.3.6.rc3-1 -> 6.3.6~rc3-1. + + -- Nico Golde <nion@debian.org> Sat, 03 Apr 2010 19:57:08 +0200 + +fetchmail (6.3.13-2) unstable; urgency=medium + + * Add 03_sdump_heap_overflow.patch to fix heap overflow in verbose SSL + certificate information display (fetchmail-SA-2010-01). + * Some fixed issues for 6.3.13: + - Russion translation for flushed fixed (Closes: #531925). + - Fetchmail no longer drops permanently undelivered messages by + default, to match historic documentation. It does so by introducing + a new softbounce option (Closes: #471283). + - Report multiline SMTP errors properly (Closes: #529899). + * Also do not complain about /etc/fetchmailrc on calling the init + script with stop (Closes: #546841). + + -- Nico Golde <nion@debian.org> Thu, 04 Feb 2010 13:02:29 +0100 + +fetchmail (6.3.13-1) unstable; urgency=low + + * New upstream version. + * Removed 02_nooverlapping_snprintf.patch no longer needed. + * Removed 03_smb_assert.patch no longer needed. + * Removed 04_fix_fetchsetup_bashism.patch no longer needed. + * Removed 05_fetchlimit_exist_status.patch no longer needed. + * Removed 06_cert_0_byte.patch no longer needed. + * Bump to policy version 3.8.4 + * Added README.source explaining that this package uses quilt. + * Added 02_man_page.patch to fix 2 man page minor bugs. + * Added ${misc:Depends} on control for both binaries. + + -- Hector Garcia <hector@debian.org> Mon, 01 Feb 2010 16:45:58 +0100 + +fetchmail (6.3.9~rc2-8) unstable; urgency=low + + * Do not complain about missing config file when daemon shouldn't + start at all (Closes: #540533). + * Depend on $syslog in init script (Closes: #541394). + + -- Nico Golde <nion@debian.org> Thu, 13 Aug 2009 23:14:16 +0200 + +fetchmail (6.3.9~rc2-7) unstable; urgency=low + + * Fix inconsistencies in init script. + * Fix double inclusion of /etc/default/fetchmail (Closes: #540245). + + -- Nico Golde <nion@debian.org> Fri, 07 Aug 2009 16:30:08 +0200 + +fetchmail (6.3.9~rc2-6) unstable; urgency=high + + * Bump to policy version 3.8.2 + + don't rely on /etc/default/fetchmail in init script but provide + default (no) for START_DAEMON and check if file exists. + * debian/rules: dh_clean -k is deprecated => dh_prep. + * Include upstream patch to fix off-by-one asserts in smbutil.c + (03_smb_assert.patch; Closes: #449179). + * Fix bashism in fetchsetup script + (04_fix_fetchsetup_bashism.patch; Closes: #530081). + * Fix exit status of fetchmail when used with --fetchlimit + option (05_fetchlimit_exist_status.patch; Closes: #508667). + * Add upstream patch to detect malicious certificates containing + a null byte in the Subject Alternative Name + (CVE-2009-2666; 06_cert_0_byte.patch). + + -- Nico Golde <nion@debian.org> Thu, 06 Aug 2009 12:44:26 +0200 + +fetchmail (6.3.9~rc2-5) unstable; urgency=low + + * Set -e flag in prerm and preinst to ensure that the script aborts + its execution on failed commands. + * Add 02_nooverlapping_snprintf.patch to prevent undefined behaviour on + using snprintf with overlapping buffers. + + -- Nico Golde <nion@debian.org> Mon, 22 Dec 2008 16:10:32 +0100 + +fetchmail (6.3.9~rc2-4) unstable; urgency=low + + * Fix broken debug-run as the login shell of fetchmail + was changed to /bin/false by passing -s to su (Closes: #492745). + + -- Nico Golde <nion@debian.org> Sat, 09 Aug 2008 14:13:32 +0200 + +fetchmail (6.3.9~rc2-3) unstable; urgency=low + + * Updated debian/resolvconf to call awake instead of try-restart. + (Closes: #488085). + + -- Hector Garcia <hector@debian.org> Fri, 04 Jul 2008 18:28:29 +0200 + +fetchmail (6.3.9~rc2-2) unstable; urgency=low + + * Fix broken init script by dropping usage of su and use + -c by start-stop-daemon instead to switch to the fetchmail + user (Closes: #487943). + + -- Nico Golde <nion@debian.org> Wed, 25 Jun 2008 13:27:01 +0200 + +fetchmail (6.3.9~rc2-1) unstable; urgency=low + + * New upstream release. + - Fix CVE-2008-2711: possible denial of service vulnerability if used + with -vv when parsing large data blobs because of an uninitialized + argument pointer. + - Allow .fetchmailrc and .fetchids to be symlinks (Closes: #452907). + - The manual page now mentions that user descriptions need to come before + user options (Closes: #467010). + * Drop 04_fix_CVE-2007-4565_DoS.patch as this release fixes the issue. + * Drop 03_capa_probe.patch as this is fixed in this release. + * Drop 02_es.po.patch included upstream. + * Drop 05_fix-manpage-grammar.patch included upstream. + * Bump Standards version to 3.8.0, no changes needed. + * Bump debhelper compatibility level to 7 and adapt build dependency. + + -- Nico Golde <nion@debian.org> Tue, 24 Jun 2008 20:49:38 +0200 + +fetchmail (6.3.8-12) unstable; urgency=low + + * Set login shell of fetchmail user to /bin/false on + installation and upgrade (Closes: #481727). + + -- Nico Golde <nion@debian.org> Sun, 18 May 2008 14:29:37 +0200 + +fetchmail (6.3.8-11) unstable; urgency=low + + * Add removal of /var/run/fetchmail to postrm script (Closes: #463987). + * Fix grammar in manpage (05_fix-manpage-grammar.patch; Closes: #461642). + * Bump standards version to 3.7.3, no changes needed. + * Fix obsolete national encoding in copyright file. + * Fix "cryptic" comment in init file (Closes: #464549). + + -- Nico Golde <nion@debian.org> Mon, 04 Feb 2008 16:19:17 +0100 + +fetchmail (6.3.8-10) unstable; urgency=low + + * Build-depend on libgssglue instead of libgssapi since it replaced + gssapi. + * Chaged $@ to $* in su call in debug-run to fix broken + quoting, thanks Klaus Ethgen (Closes: #447061). + * Switched from Homepage tag to new Homepage field in control. + * Switched from Xs-Vcs-Svn to Vcs-Svn since this is implemented + in dpkg now. + * Fixed malformed date line in changelog and syntax-error in NEWS. + + -- Nico Golde <nion@debian.org> Sat, 03 Nov 2007 18:43:13 +0100 + +fetchmail (6.3.8-9) unstable; urgency=low + + * Fixed init to detect -d parameter on OPTIONS var. (Closes: #443327) + + -- Hector Garcia <hector@debian.org> Thu, 20 Sep 2007 12:05:09 +0200 + +fetchmail (6.3.8-8) unstable; urgency=high + + * Including fix_CVE-2007-4565_DoS patch to fix + Denial of Service vulnerability in sink.c + (CVE-2007-4565) (Closes: #440006). + * Fixed fetchmailconf menu sections. + + -- Nico Golde <nion@debian.org> Wed, 29 Aug 2007 12:05:09 +0200 + +fetchmail (6.3.8-7) unstable; urgency=low + + * Changed long description to fit current state of + compiled-in features. + + -- Nico Golde <nion@debian.org> Thu, 19 Jul 2007 16:40:13 +0200 + +fetchmail (6.3.8-6) unstable; urgency=low + + * Do not suppress error output for make distclean in rules. + * Build with gssapi support (Closes: #433423). + + -- Nico Golde <nion@debian.org> Mon, 09 Jul 2007 00:07:54 +0200 + +fetchmail (6.3.8-5) unstable; urgency=low + + * Included patch to fix errors on failed + CAPA probe (Closes: #421446). + + -- Nico Golde <nion@debian.org> Thu, 14 Jun 2007 15:08:38 +0200 + +fetchmail (6.3.8-4) unstable; urgency=low + + * Disable error message about editing /etc/default/fetchmail if + init stop is called. This way you don't see the message on a + package removal. + * Added KRB5 support (Closes: #427405). + + -- Nico Golde <nion@debian.org> Sat, 19 May 2007 18:33:55 +0200 + +fetchmail (6.3.8-3) unstable; urgency=low + + * Updated patch for spanish translation, synced with + upstream SVN. + + -- Nico Golde <nion@debian.org> Mon, 14 May 2007 16:23:15 +0200 + +fetchmail (6.3.8-2) unstable; urgency=low + + * Imported ubuntu changes in init script. + * Added OPTIONS= to default file and enabled init + script to use them (Closes: #389454). + * Included upstream es.po, thanks Javier Fernández-Sanguino Peña + (Closes: #420474). + + -- Nico Golde <nion@debian.org> Wed, 11 Apr 2007 18:12:15 +0200 + +fetchmail (6.3.8-1) unstable; urgency=low + + * New upstream release. + - Make the APOP challenge parser more distrustful and have it reject + challenges that do not conform to RFC-822 msg-id format, in the hope to make + mounting man-in-the-middle attacks (MITM) against APOP a bit more difficult + (CVE-2007-1558). + - Fix manual page: --sslcheck -> --sslcertck (Closes: #413059). + - Fix segfault on NULL pointer reference in bsmtp (Closes: #416625). + - Make BSMTP output actually work (Closes: #416812). + * Changed my maintainer address. + * Added watch file again and updated to version 3. + * Fixed spelling mistake in fetchmail.default. + * Bumped compat level since we already depend on debhelper >= 5. + * Removed dirs file, not needed anymore. + * Added delete-after and delete-after.README to contrib files. + + -- Nico Golde <nion@debian.org> Sun, 08 Apr 2007 16:40:42 +0200 + +fetchmail (6.3.7-1) unstable; urgency=medium + + * New upstream release. + + [ Nico Golde ] + * Removed UIDL file creation code from init, + no longer needed (Closes: #406391). + * Removed watch file since Berlios doesn't allow + scanning anymore. + * Added logrotate script to contrib.files. + + [ Hector Garcia ] + * Make try-restart only do the start if the runlevel allow so. + (Closes: #406126). + + -- Nico Golde <nico@ngolde.de> Tue, 6 Feb 2007 17:40:54 +0100 + +fetchmail (6.3.6-1) unstable; urgency=medium + + [New upstream version] + * Repair --user: using SSL certificate/key authentication overrode the + --user option. Now the latter takes precedence, and only defaults to the + certificate's common name (Closes: #400950). + * DNS: Detect /etc/resolv.conf changes: On systems that have res_search(), + assume we also have res_init() and call it (suggested by Ulrich Drepper, + glibc bug #3675) in order to make libc or libresolv reread the resolver + configuration at the beginning of a poll cycle. This is important when + fetchmail is in daemon mode and /etc/resolv.conf is changed later by + dhcpcd, dhclient, pppd, openvpn or other ip-up/ipchange scripts + (Closes: #389270, #391698). + * Important security fixes for: CVE-2006-5867 and CVE-2006-5974. + [Nico Golde] + * added NEWS file to the packages (Closes: #406328). + + -- Nico Golde <nico@ngolde.de> Mon, 8 Jan 2007 17:57:40 +0100 + +fetchmail (6.3.6~rc5-1) unstable; urgency=medium + + [Nico Golde] + * Added LC_ALL=C export into default file to switch of + localized log messages (Closes: #400719). + * Removed gettext dependency since libc on Debian ships its own + gettext functions (Closes: #402030). + * Finally removed popclient conflicts, thanks Tobias Frost for pointing + this bug (Closes: #262257). + + -- Nico Golde <nico@ngolde.de> Fri, 1 Dec 2006 18:27:17 +0100 + +fetchmail (6.3.6~rc3-1) unstable; urgency=medium + + [New upstream version] + * sslproto keywords are now case insensitive + * In verbose mode, log every IP fetchmail tries to connect to, to avoid + misleading the user. Suppress EAFNOSUPPORT errors from socket() call, too. + (Closes: #361825) + * Track getaddrinfo() results to properly free them after timeouts and + make sure that getaddrinfo() isn't interrupted by a timeout. + (Closes: #294547, #377135). + * If the lockfile ends before the process ID, treat it as stale and unlink it. + Reported by Justin Pryzby, (Closes: #376603). + * SECURITY FIX (CHANGES BEHAVIOR): + Using at least one of the options "sslproto 'tls1'", "sslfingerprint" or + "sslcertck" enforces STARTTLS for POP3 and IMAP and terminates the connection + if unsuccessful. The same configuration causes permanent connection failure + with POP2, which is obsolete and does not support STLS. fetchmail 6.3.5 and + older had no way to enforce TLS. With those older versions, TLS was always + opportunistic, but fetchmail would happily transmit the password in cleartext + if STARTTLS failed. Reported by and fixed in cooperation with Isaac Wilcox. + Configurations using --ssl --sslcertck however have been safe. + + [Nico Golde] + * Source-Version is deprecated, using source:Version now, + thanks Tolimar for the hint. + * Added colons in init to fit debian-policy + section 9.4 (Closes: #398160). + * Changed awaken call to restart cause of DNS problems (Closes: #391698). + * Added NEWS entry to inform about behaviour changes. + * Added XS-Vcs-Svn field to control file. + * Added debian/pycompat file. + * Updated debhelper dependency to version (>= 5.0.37.2) because of dh_python + call. + [Hector Garcia] + * Changed depend of fetchmailconf to >= instead of =, to + be able to do binary rebuilds. + * Migrated from dpatch to quilt. + * Removed 02_ja.po-fix, no longer needed. + * Removed 03_imap_experimental. Included upstream. + * Removed 04_eof_fix. Included upstream. + + -- Hector Garcia <hector@debian.org> Thu, 23 Nov 2006 11:35:01 +0100 + +fetchmail (6.3.4-7) unstable; urgency=low + + * Start using lsb init script. Patch by Christian Perrier. + (Closes: #388843) + + -- Hector Garcia <hector@debian.org> Sun, 24 Sep 2006 21:59:01 +0200 + +fetchmail (6.3.4-6) unstable; urgency=low + + [Hector Garcia] + * Applied patch suggested by upstream (Matthias Andree) + to fix build when DEB_FETCHMAIL_BUILD_OPTIONS includes + KRB5. (Closes: #223820) + [Nico Golde] + * Fixed problem with ja.po file because of new gettext version + (Closes: #385160). + + -- Hector Garcia <hector@debian.org> Wed, 6 Sep 2006 22:18:56 +0200 + +fetchmail (6.3.4-5) unstable; urgency=low + + [ Nico Golde ] + * Fixed broken symlink, thanks to Piotr Ozarowski (Closes: #383177). + + [ Hector Garcia ] + * Changed try-restart to awaken fetchmail if it is running or start it if + it is not. (Closes: 268346) + + -- Hector Garcia <hector@debian.org> Wed, 16 Aug 2006 11:51:51 +0200 + +fetchmail (6.3.4-4) unstable; urgency=low + + [ Nico Golde ] + * Fixed awakening bug in init script (Closes: #380459). + * Fixed EOF handling, patch can be removed after fetchmail 6.3.5 + release (Closes: #376603). + * Bumped Standards-Version. + + [ Piotr Ozarowski ] + * Updated for the new python policy (Closes: #380794). + * Replaced /usr/bin/fetchmailconf shell script with symlink + and thus removed 01.fetchmailconf patch. + + [ Hector Garcia ] + * Added bison to build-depends. + + -- Hector Garcia <hector@debian.org> Tue, 1 Aug 2006 10:44:26 +0200 + +fetchmail (6.3.4-3) unstable; urgency=low + + [ Nico Golde ] + * Removed not needed removal of /etc/default/fetchmail in postrm + script, thanks Justin Pryzby for the hint (Closes: #374473). + + -- Nico Golde <nico@ngolde.de> Mon, 19 Jun 2006 20:03:26 +0200 + +fetchmail (6.3.4-2) experimental; urgency=low + + [ Nico Golde ] + * Added head -n1 to get the fetchmail pid from pid file in init since it + does not contain only one line (Closes: #366539). + + [ Hector Garcia ] + * Added patch from Matthias Andree to fix IMAP (Closes: #312415). + + -- Hector Garcia <hector@debian.org> Mon, 15 May 2006 13:00:41 +0200 + +fetchmail (6.3.4-1) unstable; urgency=low + + [ Hector Garcia ] + * New upstream release + - pidfile: there is a new command-line (--pidfile PATH) and global option + for the rcfile (set pidfile [=] "/path/to/pidfile") option to allow + overriding the default location of the PID file. + * Removed es.po patch, integrated upstream. + * Changed init.d to use new flag --pidfile to place pid file on + /var/run/fetchmail/fetchmail.pid (Closes: #355457) + * Changed ip-up and ip-down to use invoke-rc.d + + [ Nico Golde ] + * Checked for new policy version and changed it in control. + + -- Hector Garcia <hector@debian.org> Tue, 2 May 2006 14:24:51 +0200 + +fetchmail (6.3.3-1) unstable; urgency=low + + [ Nico Golde ] + * Added true return values to fetchmail.postinst so postinst will not fail + if fetchmailrc is empty (Closes: #355187). + * Removed syslog patch to not change old behaviour (Closes: #356675). + Reopened #282259. + * Modified homepage tag in control to fit with the new address. + * Removed && true crap from init script. + + [ Hector Garcia ] + * New upstream release + - SDPS: fetchmail no longer replaces the local user ID for an empty + envelope sender when using the proprietary SDPS extension for POP3. + (Closes: #353575) + - "ssl" is a user option rather than a server option. Patch by Nico Golde. + (Closes: #354661) + - --idle and --fetchall can now be specified on the command line, too. + * Updated es.po.dpatch + * Removed null-env-sender.dpatch, is included upstream. + * Removed 01.fix-netrc-sigsegv, is included upstream. + * Added dh_python and deleting .pyc and *.pyo from packages + * Changed init.d to remove stale pid file. + + -- Hector Garcia <hector@debian.org> Tue, 4 Apr 2006 10:54:49 +0200 + +fetchmail (6.3.2-3) unstable; urgency=low + + [ Nico Golde ] + * Fixed watch file, thanks Bart Martens. (Closes: #354357) + * Included temporary patch to fix null envelope sender problem, + will be fixed with next upstream version. (Closes: #353575) + + -- Nico Golde <nico@ngolde.de> Sat, 25 Feb 2006 20:51:10 +0100 + +fetchmail (6.3.2-2) unstable; urgency=low + + [ Nico Golde ] + * included 01.fix-netrc-sigsegv patch to fix a segmentation fault + if no password for an account in netrc is set. Will be included in + next upstream release. + + [ Hector Garcia ] + * Included 02.fix-print-date patch to fix regresion on log notification. + Is included on upstream devel branch. (Closes: #282259) + + -- Hector Garcia <hector@debian.org> Fri, 3 Feb 2006 11:19:49 +0100 + +fetchmail (6.3.2-1) unstable; urgency=low + + [ Nico Golde ] + * New upstream release + - Security fix of CVE-2006-0321 (Closes: #348747). + - Fix help for poll interval and fetchall in + fetchmailconf (Closes: #344978). + - Don't complain about READ-ONLY IMAP folders in + --fetchall --keep mode (Closes: #348964). + * Removed 01_man_page.dpatch file upstream included it. + * Fixed watch file to match on bz2 files. + + [ Hector Garcia ] + * Changed usermod --home to -d to prevent failure on old versions of passwd. + (Closes: #348855) + + -- Hector Garcia <hector@debian.org> Tue, 24 Jan 2006 16:46:51 +0100 + +fetchmail (6.3.1-4) unstable; urgency=low + + [ Nico Golde ] + * Fixed broken symlink (Closes: #348134). + * removed gzip of fetchmailconf.1 cause we should ignore it, + it points to a wrong fetchmail manpage so we set a symlink + manually. + + [ Hector Garcia ] + * Reverted pidfile location (Closes: #348037). + * Removed #!/usr/bin/env python from fetchmailconf.py since it + is used as a lib not as a script. New dpatch file. + + -- Hector Garcia <hector@debian.org> Mon, 16 Jan 2006 10:27:04 +0100 + +fetchmail (6.3.1-3) unstable; urgency=low + + [ Nico Golde ] + * Fixed FTBFS on buildds (Closes: #347996). + + [ Hector Garcia ] + * Moving fetchmail.pid instead of deleting it on upgrade to prevent + failure on first reboot (Closes: #348037). + * Fixed bug that emptyed /etc/default/fetchmail. + + -- Hector Garcia <hector@debian.org> Sun, 15 Jan 2006 03:34:05 +0100 + +fetchmail (6.3.1-2) unstable; urgency=low + + * Added usr/lib/python2.3/site-packages/ to fetchmailconf install files to + fix breakage from last upload. + + -- Hector Garcia <hector@debian.org> Fri, 13 Jan 2006 13:11:13 +0100 + +fetchmail (6.3.1-1) unstable; urgency=low + + [ Nico Golde ] + * New upstream release + - Fixed tracepolls problem for 2nd user in skip stanza (Closes: #156094). + - Corrected global option descriptions in manpage (Closes: #241883). + - Progress dots will appear now (Closes: #298557). + - Fixed manpage typos (Closes: #323028). + - Fixed character encoding of fetchmail daemon (Closes: #277324). + - Fixed broken subjects in notification mails (Closes: #301348) + - uidl usage is not switched on by default anymore (Closes: #304701). + - Security fix. CVE-2005-4348 (Closes: #345944). + - Ipv6 is now enabled by default (Closes: #345263, #329975). + * Removed de.po fix because upstream included it. + * Added Homepage tag to control file. + * Update manpage patch to current version. + * Removed flex and bison from build depends, they are no longer needed. + * Fetchmail now uses gettext. + * Removed --enable-ipv6 (its default now) and --enable-netsec cause + it is no longer working. + * Added call to make update-gmo to fix localisation problems (Closes: #340630). + * Updated copyright file. + * Removed Loïc Minier from uploaders. + * Added fetchmail-ssl removal to NEWS file. + * Removed xutils dependency because makedepend is not necessary since 6.3.0. + * Moved fetchmail home directory to /var/lib/fetchmail (Closes: #327250). + * Removed NEWS.truncated file from installation and replaced with OLDNEWS. + + [ Hector Garcia ] + * Remove man1 from mandir on install time. (change on the packaging). + * Added myself to uploaders. + * Added patch to fix warning on fetchmail man page. Should submit upstream. + * Included gettext on build-depend. + * Included patch to update es.po. Already sended patch to usual translator. + * Added /etc/default/fetchmail to define when to start fetchmail or not + (Closes: #344582, #218040, #276044). + * Added NEWS.Debian to explain above. + * Made changes on control file to delete properly old fetchmail-ssl. I must + ask ftpmaster to delete it from archive. + * Removed depend on base-files (>= 2.2.0). Woody was released with 3.0.2 + * Fixed a problem on debian/rules that was forcing configure to be called twice. + * Changed UIDL file to /var/lib/fetchmail/.fetchmail-UIDL-cache since now + upstream needs to write more files on same dir, hence /var/mail it is not + suitable. + * Added python to build-depends. + + -- Hector Garcia <hector@debian.org> Fri, 13 Jan 2006 12:01:10 +0100 + +fetchmail (6.3.0-1) unstable; urgency=low + + * New upstream release. + - Security fix. CVE-2005-2335 and CVE-2005-3088 + - Drop support for OS not conforming to the Single Unix Specification v2 + or v3 (aka IEEE Std 1003.1-2001). + - Default for --smtphost is now always "localhost". + - Force fetchsizelimit to 1 for APOP and RPOP. + - Patch, to use a NULL envelope from, not write a Return-Path header (both to + meet RFC-2821), changed From, added Subject header, rewording the human + readable part. (Closes: #316446). + - Patch to avoid a segfault in multidrop/received mode when the + Received: headers are malformatted. + - MIME-encode bodies and Subject headers of warning messages, limiting + the header to 7 bits. + - Normalize most locale codesets to IANA codesets. + - Nico Golde's patch to support "proto RPOP" in the configuration file, + reported. (Closes: #242384) + - Added Russian translation. + - Dropped da=Danish, el=Greek and tr=Turkish translations which have more + than 10% (61+) untranslated or fuzzy messages. + - Major fetchmail(1) manual page overhaul. + - Fix fetchmail leaks sockets when SSL negotiation fails. + (Closes: #301964). + - Really fix (garbage in Received: lines when smtphostset). + (Closes: #207919). + - When writing the PID file, write a FHS 2.3 compliant PID file. + (Closes: #230615). + - Make ODMR really silent, suppress "fetchmail: receiving message data". + (Closes: #296163). + - Add From: header to warning emails. (Closes: #244828). + - Fix IMAP code to use password of arbitrary length from configuration + file (although not when read interactively). (Closes: #276424). + - Document that fetchmail may automatically enable UIDL option. + (Closes: #304701). + - Put *BOLD* text into the manual page near --mda to state unmistakably + that the --mda %T and %F substitutions add single quotes, hoping to avoid + bogus bug reports. (Closes: #224564). + - gettext (intl/) has been removed from the fetchmail package. + - Use of automake. + - Rename fetchmailconf to fetchmailconf.py. Created a /bin/sh wrapper. + - New dummy fetchmailconf manual page. + - fetchmailconf redirects fetchmail's input from /dev/null so it doesn't + wait for the user to enter a password when the user doesn't even see the prompt. + - Write RFC-compliant BSMTP envelopes. + - Received: headers now enclose the for <...> destination address in angle + brackets for consistency with Postfix. + - Delete oversized messages with the new --limitflush option. + (Closes: #212240). + - Add full support for --service option. + - Make "envelope 'Delivered-To'" work with dropdelivered. + - fetchmail should now automatically detect if OpenSSL requires -ldl + - Missed --port/--service/--ssl cleanups in the manual. + - Properly shut down SSL connections. + - Add support for SubjectAltName (RFC-2595 or 2818), to avoid bogus certificate + mismatch errors. Patch by Roland Stigge, Debian Bug#201113. (MA) + - make fetchmail --silent --quit really silent. (Closes: #229014) + - Exit with error if the lock file cannot be read. + - Do not break some other process's lockfile in "-q" mode, but wait for + the other process's exit. + - Man page: --sslfingerprint points user to x509(1ssl) and gives an + example how to use it. (Closes: #213484) + - Try to obtain FQDN as our own host by default, rather than using + "localhost". If hostname cannot be qualified, complain noisily and continue, + unless Kerberos, ODMR or ETRN are used (these require a FQDN). + Partial fix of Debian Bug#150137. (Closes: #316454). + - fetchmailconf now sets the service properly after autoprobe. + (Closes: #320645). + - When eating IMAP message trailer, don't see any line containing "OK" + as the end of the trailer, but wait for the proper tagged OK line. To work + around the qmail + Courier-IMAP problem in Debian. (Closes: #338007). + - Fixes: when trying to send a bounce message, don't bail out if we cannot + qualify our own hostname, so we aren't losing the bounce. Instead, pass the + buck on to the SMTP server and use our own unqualified hostname. + (Closes: #317761) + - Updated translations: Albanian [sq] (Besnik Bleta), Catalan [ca] (Ernest + Adrogué Calveras), Czech [cs] (Miloslav Trmac), German [de] (MA), + Spanish (Castilian) [es] (Javier Kohen), French [fr] (MA), + Polish [pl] (Jakub Bogusz), Russian [ru] (Pavel Maryanov). + - In oversized warning messages, print the account name, too. + (Closes: #213299). + * Remove man1 from mandir on install time. (change on the packaging). + * Deleted es.po patch. Included upstream. Updated 00list. + * Added myself to uploaders. + * Added patch to fix warning on fetchmail man page. Should submit upstream. + + -- Hector Garcia <hector@debian.org> Wed, 21 Dec 2005 13:18:58 +0100 + + +fetchmail (6.2.5.4-1) unstable; urgency=high + + [ Lucas Wall ] + - pidfile checking in init.d script (closes: #323637). + + [ Nico Golde ] + - Only create fetchmail user if it doesn't exist (closes: #330522,#321272). + - respect the permissions of fetchmail home. + - rebuild against latest openssl version. + - removed deletion of /etc/fetchmailrc, + see statement in BTS. (closes: #288063). + - adjusted legal notes (Thanks Marc Brockschmidt for the hint). + + [ Loic Minier ] + * New upstream stable releases. + - Fix password exposure in fetchmailconf: use umask 077 before opening + output file and restore umask later. (Closes: #336096) + This is CVE-2005-3088. + - Drop 01pop3sec.dpatch, included upstream. + - Fix IMAP timeouts, counting message count down on servers that do not + send EXISTS counts after EXPUNGE. (Closes: #314509) + - Unlist spanish translation patch for now, as the spanish translation was + completely destroyed upstream. + * Add myself to Uploaders. + + -- Loic Minier <lool@dooz.org> Tue, 15 Nov 2005 18:53:37 +0100 + +fetchmail (6.2.5-18) unstable; urgency=low + + * Nico Golde: + - fixed too late apply of dpatch patches + - fixed init script (closes: #320584) + + -- Lucas Wall <lwall@debian.org> Sat, 30 Jul 2005 13:11:15 -0300 + +fetchmail (6.2.5-17) unstable; urgency=high + + * Nico Golde: + - reverted change of MTA because exim4 should be the default MTA in debian + (closes: #320311). + - included patch for Spanish translation (closes: #286044). + - included patch for German translation (closes: #313699). + + -- Lucas Wall <lwall@debian.org> Thu, 28 Jul 2005 11:27:53 -0300 + +fetchmail (6.2.5-16) unstable; urgency=high + + * Nico Golde: + - changed suggests exim4 to postfix because of personal preference + - renewed copyright file + - added dpatch to build dependencies + - removed fetchmail.NEWS file cause it is no longer current + - new upstream patch because of security issue CAN-2005-2335 + + -- Nico Golde <nico@ngolde.de> Fri, 22 Jul 2005 08:01:03 -0200 + +fetchmail (6.2.5-15) unstable; urgency=high + + * Nico Golde: + - fixed buffer overrun in pop3 UIDs handling CAN-2005-2335 + http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt + (closes: #212762) + + -- Lucas Wall <lwall@debian.org> Thu, 21 Jul 2005 13:25:10 -0300 + +fetchmail (6.2.5-14) unstable; urgency=low + + * Nico Golde: + - Remove fetchmailrc if package is purged. (closes: #288063) + - modified /etc/fetchmailrc message so it only will be printed + if $1 is start + - corrected Maintainers field in control + + -- Lucas Wall <lwall@debian.org> Sun, 17 Jul 2005 14:21:34 -0300 + +fetchmail (6.2.5-13) unstable; urgency=low + + * New maintainers. (closes: #295331) + * Lucas Wall: + - Removed debconf dependency (debconf was dropped in 6.2.5-1). + - Added build-dep on autotools-dev and switched to "copy + config.{guess,sub} on build schema". + * Nico Golde: + - Updated watch file. + - Improved init script. + - Removed conflict with popclient. (closes: #262257) + - Fixed pid file creation. (closes: #263447) + - Included contrib/fetchsetup into package. (closes: #303789) + - fixed broken esmtp support patch. (closes: #285934) + + -- Lucas Wall <lwall@debian.org> Fri, 24 Jun 2005 20:36:36 -0300 + +fetchmail (6.2.5-12) unstable; urgency=medium + + * Provide fetchmail-ssl package to facilitate upgrades from woody. + + -- Graham Wilson <graham@debian.org> Mon, 29 Nov 2004 00:43:30 +0000 + +fetchmail (6.2.5-11) unstable; urgency=medium + + * Check to see if the fetchmail user exists before starting the system-wide + fetchmail service. If not, re-add the user. This is to avoid problems when + the user purges a fetchmail-common package from woody. (closes: #268228) + * Only install the NEWS file in the fetchmail package. + + -- Graham Wilson <graham@debian.org> Tue, 14 Sep 2004 17:05:44 +0000 + +fetchmail (6.2.5-10) unstable; urgency=low + + * Fix resolvconf script error. (closes: #257647) + + -- Graham Wilson <graham@debian.org> Mon, 05 Jul 2004 08:11:07 +0000 + +fetchmail (6.2.5-9) unstable; urgency=low + + * Don't use -a with test. (closes: #252093) + * Update the server logcheck ignore file. (closes: #253022) + * Update the resolvconf script. (closes: #252807) + + -- Graham Wilson <graham@debian.org> Fri, 11 Jun 2004 19:50:36 +0000 + +fetchmail (6.2.5-8) unstable; urgency=low + + * Add a note to README.Debian concerning errors when using the UIDL file. + * Fix checking of "set no syslog" in the init script. (closes: #243142) + * Remove documentation about UIDL cache transition, since we no longer handle + that specially. + * Add a patch from Paul Slootman to use uname(2), instead of uname(1) in + interface_init. (closes: #224778) + * Clean up documentation of the 'antispam' option. (closes: #241878) + * Document 'set no syslog' in the example rc file. + * When determining /proc/net/dev format, assume post-Linux 2.2 by default. + + -- Graham Wilson <graham@debian.org> Fri, 14 May 2004 07:06:34 +0000 + +fetchmail (6.2.5-7) unstable; urgency=medium + + * Don't output dots if we are loggin to syslog. (closes: #217610) + * Don't handle the case where the UIDL cache is in root's home directory. + Users have had all of woody to take care of moving that file. + * Document in NEWS how options should be set now that /etc/default/fetchmail + doesn't exist. (closes: #242755) + * Don't add the syslog option to the command line if the user has 'set + no syslog' in /etc/fetchmailrc. (closes: #242165) + * Apply patch for the debug mode in the init script. Thanks to Ilguiz + Latypov. (closes: #240598) + * Set the permissions correctly on the UIDL cache file. (closes: #241649) + + -- Graham Wilson <graham@debian.org> Fri, 09 Apr 2004 01:06:56 +0000 + +fetchmail (6.2.5-6) unstable; urgency=medium + + * Rename NEWS.Debian to NEWS, so that it gets installed. + * Use a better check for the daemon option in the system-wide + fetchmailrc file. (closes: #240699) + * Update the sample fetchmailrc to reflect the current state of the + fetchmail package. + * Create the UIDL cache file if it doesn't exist and we are going to + use it. Hopefully this fixes it. (closes: #237703) + + -- Graham Wilson <graham@debian.org> Fri, 02 Apr 2004 04:07:14 +0000 + +fetchmail (6.2.5-5) unstable; urgency=low + + * Reformat NEWS.Debian, and try to make it more accurate as to the changes. + * Don't discard output from the ip-up script. + * Use normal fetchmail PID file format. This re-opens #230615. + (closes: #235519, #240159) + * Only call fetchmail with the --daemon option if system-wide config file + doesn't. (closes: #236105, #238036) + * Reread config file if we are re-execing ourselves. Thanks to Jeff Norman + for the patch. (closes: #202787) + * Correct man page documentation concerning using --quit with other + options. (closes: #226822) + * Change owner of UIDL cache file if it exists. (closes: #237703) + + -- Graham Wilson <graham@debian.org> Fri, 26 Mar 2004 05:07:34 +0000 + +fetchmail (6.2.5-4) unstable; urgency=low + + * Install logcheck ignore files correctly, and add a line to the workstation + file. (closes: #234713) + + -- Graham Wilson <graham@debian.org> Wed, 25 Feb 2004 23:19:47 +0000 + +fetchmail (6.2.5-3) unstable; urgency=low + + * Make return codes and messages comply with the LSB. (closes: #234352) + * Correctly detect if the running process is backgrounded. (closes: #234387) + * Fix error in ja.po. (closes: #233634) + * Set fetchsizelimit = 1 for all POP3 variants. (closes: #234268) + * Quote x11 in the menu file to make lintian happy. + * Update standards version to 3.6.1 (no changes). + + -- Graham Wilson <graham@debian.org> Wed, 25 Feb 2004 22:50:38 +0000 + +fetchmail (6.2.5-2) unstable; urgency=low + + * Thanks to Thomas Hood for his help with this release. + + * Suggest resolvconf. + * Rename the init script in the debian/ directory. + * Minor man page fixes. (closes: #231072) + * Use FHS compliant lock format. (closes: #230615) + * Under try-restart, just re-invoke the script with the restart argument. + * Don't die if /etc/fetchmailrc has the wrong permissions. + * Clean up in postrm, including calling dh_purge and not complaining + so much. + * Correct the test in try-restart. (closes: #230613) + * Call invoke-rc.d with the --quiet option. + + -- Graham Wilson <graham@debian.org> Sun, 22 Feb 2004 03:18:40 +0000 + +fetchmail (6.2.5-1) experimental; urgency=low + + * This release is mostly a rewrite of postinst, rules, and the init + script; I have tried to clean them up some, and to add some + improvements. (closes: #221115) + + * Use invoke-rc.d in postinst and prerm. (closes: #218040) + * In ip-up, only restart fetchmail if it is running. (closes: #222535) + * Rip out all of the debconf-related stuff. (closes: #215818) + + * In debian/rules: + - correctly support noopt and nostrip + - use dh_install in favor of dh_movefiles + - move commands from install target to binary-arch target + - use debian/compat instead of DH_COMPAT + + * Documentation updates: + - clean up README.Debian and try to clarify some things + - update the copyright file + - add a NEWS file + + * Add a watch file for uscan. + * Add support for resolvconf. + + * New upstream release. + + -- Graham Wilson <graham@debian.org> Fri, 30 Jan 2004 02:24:01 +0000 + +fetchmail (6.2.4-7) unstable; urgency=low + + * Suggest exim4 instead of exim. (closes: #228593) + + -- Graham Wilson <graham@debian.org> Tue, 20 Jan 2004 17:33:25 +0000 + +fetchmail (6.2.4-6) unstable; urgency=low + + * Build the postinst file for the binary-arch target. (closes: #225396) + + -- Graham Wilson <graham@debian.org> Mon, 29 Dec 2003 18:20:39 +0000 + +fetchmail (6.2.4-5) unstable; urgency=low + + * Replace autogen.sh with a new script. + * Remove config.status & Makefile on distclean. + * debian/rules: + - Don't automatically run autogen.sh. + - Don't automatically update config.sub or config.guess + - Remove the need for configure-stamp. + - Remove uneeded variables. + - Clean up `clean' and `config.status' targets. + - Update --build and --host usage. + * Don't need {executable,deletable}.files + * Remove old control and changelog files. + * Convert changelog to UTF-8. + * Update es.po, thanks Carlos Valdivia Yagüe. (closes: #220926) + * Fix numerous small errors in the manpage. + * debian/control: + - New maintainer. Thanks Benjamin. (closes: #221919) + - Trim the build-depends list. + - Don't need to build-depend on m-t-a, since it was only used for + fallback selection. + + -- Graham Wilson <graham@debian.org> Tue, 23 Dec 2003 17:18:07 +0000 + +fetchmail (6.2.4-4) unstable; urgency=low + + * Fix postinst bugs (closes: #216630) + * Remove if-up crap, which was a bad idea(tm) (closes: #216503, #217985) + * Update russian and danish translation (closes: #214355, #216330) + * Clean up source tree from old templates (closes: #217434) + + -- Benjamin Drieu <benj@debian.org> Tue, 28 Oct 2003 22:35:27 +0100 + +fetchmail (6.2.4-3) unstable; urgency=low + + * Fix a typo in new if-up.d/fetchmail script (closes: #212554). + + -- Benjamin Drieu <benj@debian.org> Mon, 29 Sep 2003 08:27:32 +0200 + +fetchmail (6.2.4-2) unstable; urgency=low + + * Hack sink.c again to handle smtpname gracefully (Closes: #207919). + * Fix a bug that prevented limit and flush to cooperate (closes: #212240). + * Update Brazilian (closes: #207967), French (closes: #208999), Japanese + (closes: #211015) and Dutch (closes: #211148) debconf translations. + * Add a /etc/network/if-up.d/fetchmail script to handle restarted + interfaces (closes: #212554). + + -- Benjamin Drieu <benj@debian.org> Sun, 28 Sep 2003 15:18:40 +0200 + +fetchmail (6.2.4-1) unstable; urgency=medium + + * The "Let fix some bugs" release + * New upstream version: + + Updated German, Spanish, Catalan, and Turkish translations. + + IDLE is now supported using no-ops even if the server doesn't + support the IMAP IDLE extension. (closes: #202308) + + Sunil Shetye's patch to do better password shrouding. + (closes: #200470) + + Sunil Shetye's bug-fix rollup patch. + - Protocol errors do to incorrect assumption of protocols being able + to skip bodies (Closes: #203319, #201829, #207281, #204602) + - Avoid useless reconnections with limit & expunge (closes: #202207) + - Fix some auth problems (closes: #197813, #199462, #200208) + - Fix a parse error in fetchmailrc (closes: #184078) + - Finally fix the broken headers bug + (closes: #146690, #170941, #197007) + + Introduce a translation item for the word "seen". (closes: #158050) + + Back out the hack to deal with lack of byte stuffing on some POP3 + servers. + + Thomas Steudten's patch to improve SMTP handling of 550 errors. + * Switch to po-debconf based templates (closes: #200361) + * Make sure we use the pidfile (closes: #207295) + * Fix a small typo in manpage (closes: #205892) + + -- Benjamin Drieu <benj@debian.org> Thu, 28 Aug 2003 15:47:25 +0200 + +fetchmail (6.2.3-1) unstable; urgency=low + + * New upstream version: + - German, Danish, Spanish, and Turkish translations updated. + - Brian Sammon's patch to deal with malformed message lines containiing NULs. + - Fai's patch to ignore all but the first Return-Path (some spams have + more than one of these) (closes: #192977). + - Bendebjamin Drieu's patch to properly byte-stuff when talking to BSNTP + (closes: #184469). + - Benjamin Drieu's patch to enable auth=cram-md5. (closes: #185232) + - Sunil Shetye's configure.in patch to avoid spurious search order messages + from GCC. + - Header-reading code now copes better with lines ending in \n only. + - Elias Israel's patches for POP3 NTLM support and dealing with byte- + stuffing failures at socket level. + * Fix my patch fixing #156592 (closes: #188417) + * Add a new logcheck patterns (closes: #198274, #202619) + * Fix dead links in debian/copyright (closes: #200519) + + -- Benjamin Drieu <bdrieu@april.org> Mon, 21 Jul 2003 10:49:04 +0200 + +fetchmail (6.2.2-4) unstable; urgency=low + + * Yet another init.d/fetchmail shell script error. + + -- Benjamin Drieu <benj@debian.org> Fri, 4 Jul 2003 13:51:35 +0200 + +fetchmail (6.2.2-3) unstable; urgency=low + + * Fix typo in shell script (closes: #197744) + + -- Benjamin Drieu <benj@debian.org> Tue, 17 Jun 2003 10:49:37 +0200 + +fetchmail (6.2.2-2) unstable; urgency=low + + * Do not croak if /usr/share/doc/fetchmail is missing (closes: #197631) + + -- Benjamin Drieu <benj@debian.org> Mon, 16 Jun 2003 17:01:41 +0200 + +fetchmail (6.2.2-1) unstable; urgency=low + + * New upstream source: + + Sunil Shetye's patch to improve behavior in empty messages. + (closes: #173343) + + Conform to RFC2595; reissue capability probes after successful + STARTTLS negotiation. + + Sunil's patch to make handling of failed STARTTLS more graceful. + + Sunil's JF2 fix patch for .fetchmailrc security fix. + + Christophe GIAUME <christophe@giaume.com> finished the implementation + of RFC2177 IDLE. + + Jason Tishler's fix patch for Cygwin. + + Support ssh-style authentication in POP3 + + Fix for Debian bug #108977, clean up config file evaluation, + by Benjamin Drieu. (already closed in 6.2.1-1) + * Provide an example of smtphost (closes: #192710) + * Fix two errors in manpage (closes: #180917, #189918) + * Fix init.d script not to override conffile's idfile option + (closes: #190762) + + -- Benjamin Drieu <benj@debian.org> Wed, 11 Jun 2003 13:08:37 +0200 + +fetchmail (6.2.1-1) unstable; urgency=low + + * New upstream source: + + Updated German, Turkish, Spanish, and Danish translation files. + + Integrated Sunil Shetye's patch to make mark_seen an explicit method + + Removed FAQ warning about GMX and associated fetchmailconf check, we + have a report that its servers are conformant now. + + Another Sunil patch to fix a minor bug in bouncemail generation + (closes: #174795) + * Build with libssl-0.9.7 + * Hack fetchmail.c to prevent excessive config file evaluations + (closes: #108977) + * Add a "sleep" in init script to make restart happy (closes: #180545) + * Remove autom4te.cache after build (closes: #179134) + * Make etc files conffiles (closes: #175436) + + -- Benjamin Drieu <benj@debian.org> Fri, 31 Jan 2003 11:05:11 +0100 + +fetchmail (6.2.0-3) unstable; urgency=high + + * Rebuilt package with testing dependencies, so that it will hit testing + as soon as possible, thus severity is high (will close grave bug #175990). + * Fix an attempt to ls conf file even if not created (closes: #174675) + * Add a new regexp to logcheck (closes: #176861, 176861) + * Update spanish templates (closes: #174402) + * Fix a german typo in templates (closes: #174553) + * Update man page (closes: #173862) + + -- Benjamin Drieu <benj@debian.org> Thu, 16 Jan 2003 16:32:16 +0000 + +fetchmail (6.2.0-2) unstable; urgency=high + + * Attempt to close #169568, which may be caused by a subtle touch behavior + on ia64 and alpha. Many thanks to Lukas Geyer (closes: #169568). + * Do not frob conffile unconditionally (closes: #150533) + + -- Benjamin Drieu <benj@debian.org> Thu, 19 Dec 2002 14:08:48 +0100 + +fetchmail (6.2.0-1) unstable; urgency=high + + * New upstream version + + SECURITY FIX: Applied Steffen Esser's fix for a buffer-overflow + bug in rfc822.c + + Updated Danish, German, and Turkish translation files. + + Sunil Sheye's SMTP timeout patch. + + -- Benjamin Drieu <benj@debian.org> Wed, 18 Dec 2002 11:41:28 +0100 + +fetchmail (6.1.3-2) unstable; urgency=low + + * Fix stupid typo that prevented changelog to be installed + (closes: #171525) + * Add a recommendation on "ca-certificates" on a idea of Andrew Lau + + -- Benjamin Drieu <benj@debian.org> Fri, 30 Nov 2002 10:40:12 +0100 + +fetchmail (6.1.3-1) unstable; urgency=low + + * New upstream source + + Updated Turkish, Danish, German, Spanish, Catalan po files. + + Added Slovak support. + + Configure.in update for autoconf 2.5 (Art Haas). + + Be case-insensitive when looking for IMAP responses. + + Fix logout-after-idle-delivery bug (Sunil Shetye). + + Sunil Shetye's patch to bulletproof end-of-header detection. + (closes: #146690) + + Sunil's fix for the STARTTLS problem -- repoll if TLS nabdshake + fails. The attempt to set up STARTTLS can be suppressed with + 'sslproto ""'. + * Merge fetchmail and fetchmail-ssl into one single source. Remove + fetchmail-common (closes: #164570) + * FTBFS for 6.1.2 are not relevant anymore (closes: #169568, #169571) + * Do not advertise non-free software in control (closes: #170659) + * Hack sink.c to prevent segfaults on null headers while bouncing + mail (closes: #170029) + * PPP ip-up script now restart fetchmail (closes: #145437) + + -- Benjamin Drieu <benj@debian.org> Fri, 29 Nov 2002 16:08:00 +0100 + +fetchmail (6.1.2-1) unstable; urgency=low + + * New upstream source (closes: #164621, #167472, #146690) + + Jan Klaverstijn's verbosity-lowering patch. + + Updated Turkish, German, Catalan, and Danish translation files. + + Fix processing of POP3 messages with missing bodies. + + Minor fixes by Sunil Shetye: fix generation of auth fail note, + handle unexpected SIGALRM, plug memory leak, handle lines beginning + with '\0', try to bulletproof error handling against read failures. + * Fix manpage which was outdated regarding antispam capabilities + (closes: #167266) + * Users should now be able to build custom packages with Kerberos, + (closes: #165762) + + -- Benjamin Drieu <benj@debian.org> Wed, 23 Oct 2002 18:24:18 +0200 + +fetchmail (6.1.0-2) unstable; urgency=medium + + * Fix trivial fetchmail --configdump bug (closes: #163286) + * Fix typo in ROOT_UID checking in fetchmail.c (closes: #163043) + * Apply Sunil Shetye patches to fix various IMAP and POP3 SSL problems + (closes: #163028, #162566, #162625) + * Hack do_session() to avoid not-so-silent "Repoll" messages in silent + mode (closes: #162571) + * Hack smtp_open() to strip port number that caused invalid email adresses + (closes: #156592) + + -- Benjamin Drieu <benj@debian.org> Wed, 9 Oct 2002 23:12:04 +0200 + +fetchmail (6.1.0-1) unstable; urgency=low + + * New maintainer (closes: #156667) + * New upstream source (closes: #152125): + + Updated French translation. + + SECURITY FIX: Stefan Esser's fix for potential remote vulnerability + in multidrop mode. This is an important security fix! + + Applied Matt Kraai's fixes for minor Debian bugs (Closes: #144539, #152222). + + Nerijus Baliunas's patch to support STARTTLS over IMAP. + + More cleanups and minor bugfixes from Sunil Shetye (Closes: #117472). + + Default antispam-response list is now empty. + + Updated de and po translations. + * fetchmail-common: Fix wrong path in /etc/init.d/fetchmail (closes: #158323) + + -- Benjamin Drieu <benj@debian.org> Thu, 26 Sep 2002 16:29:28 +0200 + +fetchmail (5.9.11-7.0) unstable; urgency=low + + * NrMU (I have RFA'ed this thing, and I MEAN it) + * Recompile to get new python dependencies right (closes: #158997) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 16 Sep 2002 13:17:57 -0300 + +fetchmail (5.9.11-7) unstable; urgency=high + + * Same as woody 5.9.11-6 + * SECURITY FIX: avoid buffer overflow on 64bit archs (imap.c) + This is a remote-expolitable buffer overflow, if the imap server + is hostile (backported from new upstream 5.9.12, bug found and + fixed by Nalin Dahyabhai) + * Minor fix to avoid leaking children (driver.c) + (backported from new upstream 5.9.12) + * Avoid trying to speak kpop to a imap server (driver.c) + (backported from new upstream 5.9.12) + * MINOR SECURITY FIX: better password shrounding (fetchmail.h, imap.c, + transact.c) (backported from new upstream 5.9.12) + * Handle empty addresses from a To: header containing only a comment + (transact.c) (backported from new upstream 5.9.12) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 8 Jun 2002 09:40:46 -0300 + +fetchmail (5.9.11-5) unstable; urgency=low + + * Grrr, fix stupid "be be" typo in package description too, while at + it... + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 24 Apr 2002 14:02:42 -0300 + +fetchmail (5.9.11-4) unstable; urgency=high + + * The "I knew it" release + * Hack around STLS problems: fetchmail would try to start STLS even if + it was already talking over a secured channel. Thanks to Matt Kraai + <kraai@alumni.cmu.edu> for the patch + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 24 Apr 2002 10:54:47 -0300 + +fetchmail (5.9.11-3) unstable; urgency=high + + * The "May this one be the last upload to woody" release + * Fix stupid typo in postrm script that redirected output to dev/null + instead of /dev/null (closes: #143145) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 16 Apr 2002 17:03:29 -0300 + +fetchmail (5.9.11-2) unstable; urgency=high + + * Fix another stupid bug in sink.c: do NOT cause mail to bounce + on 553 errors and the like + * Fix off-by-one error in base64.c anti-overflow patch from 5.9.10-4, + thanks to Ronald Wahl <Ronald.Wahl@informatik.tu-chemnitz.de> for + the fix. This probably fixes KerberosIV auth + * imap.c:do_imap_ntlm had the buffer size for from64tobits incorrectly + set to the input buffer size (closes: #141969) + * I dislike pointer arithmetric a lot, so I fixed base64.c to implement + from64tobits properly instead of applying the patch in the bug report + (closes: #141972) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 9 Apr 2002 12:40:31 -0300 + +fetchmail (5.9.11-1) unstable; urgency=high + + * New upstream source: + + Explicitly allow linking to OpenSSL in COPYING + (license change) + + Updated Turkish and Japanese translations + + Added warning about auth failures on the GMX server + + odmr.c: decrease log verbosity + (very minor code changes from Debian release 5.9.10-4) + * Crypto-in-main change to fetchmail-ssl's control file. + fetchmail-ssl has been moved into main, section mail, priority + extra. + * Matt Kraai's cosmetic env.c changes + * Enable Japanese localisation in configure.in + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 2 Apr 2002 09:47:30 -0300 + +fetchmail (5.9.10-4) unstable; urgency=high + + * SECURITY FIX: Avoid buffer overflows in base64.c, patch from + Matt Kraai <kraai@debian.org> + * Revert crypto-in-main until we can get the fetchmail license + straightened out. I am doing this to get the security patches + to the fetchmail-ssl crowd, but *expect fetchmail-ssl to be + removed from Debian* if the license issue with OpenSSL is not + fixed soon enough. It certainly will not be in Woody without + a license fix. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 27 Mar 2002 13:25:18 -0300 + +fetchmail (5.9.10-3) unstable; urgency=high + + * SECURITY FIX: Fix lots of buffer overflows lurking in + the new SMTP AUTH code in smtp.c (closes: #139644) + * Crypto-in-main change to fetchmail-ssl's control file. + fetchmail-ssl has been moved into main, section mail, priority + extra. + * Fix 4xx PS_TRANSIENT patch to shut up gcc warning + (utterly safe patch. Add explicit initialization of variable) + * Apply Sunil Shetye <shetye@bombay.retortsoft.com>'s patches + to detect and fix some format string bugs in fetchmail + (safe patch. Adds __attribute__ to some function + definitions, and fixes some obviously broken format strings) + * Add Catalan templates, thanks to Antoni Bella (safe patch, + closes: #139731, #139744) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 25 Mar 2002 13:38:52 -0300 + +fetchmail (5.9.10-2) unstable; urgency=low + + * The "get this sucker ready for a woody" release + * Track down stupid dangerous data-losing bugs in fetchmail: + + flushing messages on 4xx + can't send to postmaster + This was caused by the multidrop crap. Failover system added + that forces return of PS_TRANSIENT (and no bouncing of mail) + if any recipient returns a 4xx error. If this causes multidrop + misconfiguration to be hard to detect, you will get NO + sympathy from this maintainer; Other users were losing data + due to this bug + + non-paranoid documentation of default non-empty antispam list: + fixed in manpage, README.Debian + + non-paranoid documentation of the two always-delete-it codes: + fixed in manpage, README.Debian + + not always enforcing stripcr for delivery: + fixed by removing fallbacks, and upstream fallback stripcr fix + (closes: #133876) + * Tell people to read fetchmailconf to verify their servers against the + blacklist + * Add an "your helpful Debian Maintainer" section to top of manpage + * Fix minor spelling problem the BTS never delivered to me + (closes: #137277) + * Fix breakages caused by the new ESMTP AUTH stuff not being completely + implemented (closes: #138728) + * This upload has STLS support (closes: #138930) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 21 Mar 2002 11:56:07 -0300 + +fetchmail (5.9.10-1) unstable; urgency=medium + + * New upstream source + + Security fix: don't trust the message count passed back by the server + + Matt Kraai's patch for supporting STLS over POP3 + + Jakub Ulanowski's patch to fix SSL fingerprint handling + + ESMTP AUTH support from Wojciech Polak <polak@lodz.pdi.net> + (closes: #60805) + * Apply Byrial Jensen <byrial@image.dk>'s patches for i18n of new + 5.9.10 messages + * Add French template, thanks to Denis Barbier <barbier@debian.org> + (closes: #137539) + * Apply patch from Sunil Shetye <shetye@bombay.retortsoft.com> to + correctly signal failures to open/create a logfile as such, instead + of stupid "dup(): illegal FD" cryptic errors + * Apply a modified version of a patch from Sylvain Benoist + <sylvainb@whitepj.com>, to avoid file descriptor leaks on open + timeouts and reenable SSL connect timeouts (closes: #115355). + Grr, I never got that last email from the bug submitter, the + freaking BTS sent me the spam, though... + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 13 Mar 2002 21:01:56 -0300 + +fetchmail (5.9.8-4) unstable; urgency=low + + * Fix autoconf support in debian/rules + * Add Sunil Shetye's patch to stop fetchmail from trying to fetch + twice with IMAP (when EXISTS is not returned on EXPUNGE, old value + of count was used) + * Added Russian template translation, thanks to Ilgiz Kalmetev, + (closes: #136275) + * Added Espanish template translation, thanks to Carlos Valdivia, + (closes: #135065) + * Enforce mode 0600 on /etc/fetchmailrc, since fetchmail insists on it + anyway (closes: #135416) + * Add warning to README.Debian about the now gone MDA fallback + * Edit manpages to make sure the MDA fallback myth doesn't come back, + either + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 5 Mar 2002 15:23:37 -0300 + +fetchmail (5.9.8-3) unstable; urgency=low + + * Really fix #126221 this time, I hope. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 17 Feb 2002 07:50:53 -0300 + +fetchmail (5.9.8-2) unstable; urgency=low + + * Remove fetchmail-up and fetchmail-down scripts. There is no reason + at all not to call /etc/init.d/fetchmail for the ppp up and down + functions. (closes: #134190) + * Add sample /usr/share/doc/fetchmail{-ssl,}/ip-down example script + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 16 Feb 2002 07:28:43 -0200 + +fetchmail (5.9.8-1) unstable; urgency=medium + + * New upstream source: + + Document interaction of expunge in POP3 and servers which require a + delay before reconnection (closes: #132769) + + vsprintf underflow fixes by Sunil Shetye. + + Added warning about UIMS POP3 server. + + Sunil Shetye's patch for idle timeout during poll. + * Update copyright file (closes: #133497) + * Re-create /var/run/fetchmail on init.d script (closes: #133577) + * A recent upload disabled fingerprint output when running in silent + mode (closes: #126221) + * Use a safer (but far more likely to leave cruft behind) method of + removing the fetchmail user during purge. Users that request fetchmail to + be purged will not lose anything they left behind in /var/run/fetchmail, + even if they DID tell dpkg to purge all fetchmail traces from the system. + Don't expect such level of babysitting very often (closes: #130779) + * Fix fuckage on new i18n templates, and update da.po while at it + * fetchmail, fetchmail-ssl: call db_purge on install and upgrades, to + let debconf know that all templates were moved to fetchmail-common. + Otherwise, they are not removed from the system on purge + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 16 Feb 2002 00:50:24 -0200 + +fetchmail (5.9.7-3) unstable; urgency=low + + * Disable /usr/sbin/sendmail fallback (closes: #133340) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 11 Feb 2002 11:35:29 -0200 + +fetchmail (5.9.7-2) unstable; urgency=low + + * Do not supress the read of the message body when transact.c(readheaders) + returns PS_TRUNCATED (closes: #128672) + * Fix longstanding SSL hang w/ 100% CPU usage bug, thanks to + Matthias Andree <ma@dt.e-technik.uni-dortmund.de> for tracking down and + fixing the bug (closes: #127041) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 10 Feb 2002 12:22:39 -0200 + +fetchmail (5.9.7-1) unstable; urgency=low + + * New upstream source: + + Properly guard some transaction reporting in the SSL code + + Expunge edge case fix by Sunil Shetye + + Fixes for some odd IMAP and SMTP edge cases by Sunil Shetye + + UIDL bug fix by Matthias Andree + + Use smtpaddress, if present, to set the return path on warning mail + + Tell parser to object when SSL keyboard is used with SSL not compiled + + GSSAPI and ODMR fixes by Tom Hughes + * Fix small typo in message output (initscript) (closes: #129270) + * Change references to packaging-manual to debian-policy in comments + * Applied Tom Hughes patches to fix build of gssapi.c + * Enable i18n for "de" locale + * Do not output error when user requests "NO SSL" in the no-ssl version + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 2 Feb 2002 20:29:35 -0200 + +fetchmail (5.9.6-2) unstable; urgency=medium + + * Fix minor upgrade glitch: now remove /usr/share/doc/fethmail{-ssl,} + in new fetchmail{-ssl,} preinst script (closes: #126155) + * Tweak descriptions of fetchmail-common, fetchmail and fetchmail-ssl + to mention each other (closes: #126345) + * Fix non-initialization of deletions(imap.c), which resulted in random + crashes. Thanks to Sunil Shetye <shetye@bombay.retortsoft.com> for + tracking down the issue and for a preliminary version of the patch. + * Add umask 022 and some chmod --reference to postinst, so that we create + /etc/default/fetchmail with mode 644 and avoid changing its permissions + later. I will not attempt to chmod 644 it, since the user might have a + good reason to want it mode 600, so old files will remain 600 until the + user notices and chmods it himself if he wants to (closes: #126655) + * Add Danish debconf templates, thanks Claus Hindsgaul + (closes: #126595, #126596) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 29 Dec 2001 17:08:51 -0200 + +fetchmail (5.9.6-1) unstable; urgency=medium + + * The "Twilight in the North Sea" release + * New upstream source: + + OPIE bug fixes by Jun Miyoshi <usako@omnisci.co.jp>. + + Documented known IDLE bug in the todo.html file. + + Sunil Shetye's fix for a timeout/reconnect bug. + + LMTP fix from Toshiro HIKITA <toshi@sodan.org>. + + The duplicate-killer doesn't try to operate if we can get an actual + recipient address from the trace headers. + * Fix usage of dpkg-architecture in debian/rules: do not append -gnu to + the result, dpkg-architecture might be fixed to actually work as it + should someday, after all... + * Create a fetchmail-common package, to fix once and for all the problems + resulting from the sharing of conffiles between fetchmail and + fetchmail-ssl (closes: #123056) + * fetchmail-up: return exit status 0 if $DAEMON is not there to be run + * ip-up: return exit status 0 if initscript is not there to be run + * Document well in README.Debian just how dumb it is to forget to test-run + fetchmail with the 'keep' option when one changes the MTA/MDA + configuration, or fetchmail's. Also document the less-likely-to-delete- + messages way: setting antispam to -1 and setting "no bouncemail". + Upstream does not want to change the antispam defaults, and I happen to + think this is his call. OTOH, I will add an example config with safe + options, and if clueless people use that one, they will be [mostly] safe + from harm (closes: #123759) + * Report errors while opening logfile (closes: #120526) + * Change initscript slightly to show 'fetchmail' before trying to start + or signal it (closes: #121939) + * lintian override: "E: fetchmail-ssl usr-doc-symlink-to-foreign-package": + fetchmail-ssl DOES come from exactly the same source of fetchmail-common, + due to the ssl transformation hack. This hack will be shortlived. As soon + as woody is out or crypto in main arrives, I am killing the non-crypto + version of fetchmail. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 16 Dec 2001 11:04:12 -0200 + +fetchmail (5.9.5-7) unstable; urgency=low + + * Braindamaged sudo usage hits again. I am done with this, screw $HOME -- + sudo users make this useless and still expect stuff to work. Now use + getent passwd instead of assuming $HOME has anything useful at all in + these checks (closes: #122716). Yet another 'tip' for the currently + in limbo "debian packaging manual/howto/whatever". + * Apply patches from Mikael Andersson <mikan@debian.org> to fix build + with Debian kerberos4th. You better be using a new kerberos4th (>= 1.1), + or else this will break your build + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 8 Dec 2001 03:50:21 -0200 + +fetchmail (5.9.5-6) unstable; urgency=high + + * Fix logcheck.ignore file to really close #120398 + * Kicked urgency to high to get this thing into testing ASAP + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 28 Nov 2001 13:21:53 -0200 + +fetchmail (5.9.5-5) unstable; urgency=low + + * Complile all archs using -O instead of -O2, since upstream + also does it, and -O2 is broken in sparc (closes: #119425) + * Force correct permissions before trying to read config file + (closes: #120932) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 24 Nov 2001 14:34:28 -0200 + +fetchmail (5.9.5-4) unstable; urgency=low + + * Yet another workaround against #119366, make sure the owner of + /var/run/fetchmail is fetchmail:nogroup (closes: #120519) + * Add the chown workaround to the init script too, just in case + * Added "key fingerprint" and "#### body octets" to logcheck.ignore + (closes: #120398) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 22 Nov 2001 00:29:04 -0200 + +fetchmail (5.9.5-3) unstable; urgency=low + + * Added fetchmail\[[0-9]+\]: sleeping to logcheck.ignore (closes: #119682) + * Changed verbosity of "sleeping at ..." log message so that it only + shows up if fetchmail is above normal log level (closes: #120078) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 18 Nov 2001 11:55:07 -0200 + +fetchmail (5.9.5-2) unstable; urgency=low + + * Remove uneeded conflicts with python >=2.2. Lintian was screwing up. + * Add workaround for #119366, adduser not ensuring that the homedir + of the fetchmail user is really there + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 12 Nov 2001 22:10:38 -0200 + +fetchmail (5.9.5-1) unstable; urgency=low + + * The "Very dark skies ahead" release + * Enjoy NLS while it lasts. Upstream may drop it in the close future, + and I am not sure I will keep it alive in a Debian fork (I will certainly + try, however) + * New upstream source: + + Finished license cleanup, all licenses in the distribution are now + officially GPL-compatible. + + Added a length check to from64tobits() after receiving a warning that + it might create buffer overflows. No exploitable overflows were found + by a careful case-by-case audit, and at minimum an exploit would have + required that the mailserver be subverted + + Changed the logging logic along lines suggested by Jan Klaverstijn + + fetchmailconf looks first in the directory it's running from to find + fetchmail + + Make sure we vet a success status correctly from open_smtp_sink() + and open_bsmtp_sink() + + Immediately abort if a non-empty QMAILINJECT environment variable is + found. If it is set and contains f or i, qmail-inject or qmail's + sendmail `compatibility' wrapper will rewrite From: or Message-ID: + headers, respectively. En passant, fix the bug that program_name was not + filled in before used when the user's ID had no PW entry, leading to + (null) or crash when printing the error message. Patch by Matthias + Andree + + Block signals during SockConnect() so we don't get a socket descriptor + leak if we're hit by an alarm signal during connect(2) + + Set queryname even when server is inactive; avoids a core-dump bug in + the fetchids code + * Add -tt option to strace in the init.d debug-run debug helper + * Fix all calls to from64tobits so that fetchmail will actually compile, + I have no idea how it is compiling upstream without this. Maybe my CVS + tree is weird... oh well, I am using the non-exploitable version, so + I could care less :P + * Do not run config.guess anymore, trust output of dpkg-architecture + * Update fetchmailconf dependency list for the python 2.1 changes + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 10 Nov 2001 11:32:14 -0200 + +fetchmail (5.9.3-1) unstable; urgency=low + + * The "Upstream blues" release(s) :P + * New upstream source + + Make -D short option for --smtpaddress active again + + Make sure IMAP capability checks are caseblind + + Make sure suffix checks on akalists are properly caseblinded + + All warning mail now has a generated date stamp + + End of poll cycle is now logged + + Sanity check now rejects SSL option if SSL support is not + compiled in (Closes: #109796) + + Mike Warfield's fix for using a combined SSL cert and key in a + single file + + DNS lookups moved to just before te mailserver socket open, so + fetchmail now works OK even if started up without Internet + access. HESIOD lookups moved just before the DNS lookups + + Make sure the SICHLD handler is called when we run detached + (this helps with the zombie issue in #95659, I hope) + + Added FAQ item X8 on why mail sometimes gets an extra ) + appended + + Thomas Moestl's patch to use querynames in UID files. + + Timeout to deal with long socket closes (Sunil Shetye). + + Move from RSA MD5 code to Colin Plumb's public-domain implementation + (BSD classic license eliminated) + + Rewrite strcasecmp() (BSD classic license eliminated). + + Updated Danish po file. + + Re-enable explicit bounce message on bad address. + * Make sure .pot files are up-to-date. Will fix this for real in the + next upstream version, after I know how ESR will fix this upstream, + and what will come inside the upstream tarball + * fetchmailconf: fix tuple in sock.connect for python 2.1. Thanks to + Alain Tésio <alain@onesite.org> for the patch + * fetchmailconf: disable gross hack from upstream. We do NOT want + fetchmailconf to look for fetchmail in the current dir before it + searches $PATH. I shudder at the bug reports from clueless users... + * Fix problematic changes in 5.9.1-3 that caused POP2 protocol to be + run without being requested + * Make sure xgettext knows fetchmail uses GT_() instead of _() for gettext + (someone in fetchmail-friends pointed the need to do this, but I lost + his name somehow. Thank you, whomever you are). This actualy exposed + a bug in gettextize + * Update documentation on the _() to GT_() transition (sent upstream) + * Version dependency on debconf due to seen flag + * Fix typo in debian/copyright. Lintian rules! + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 30 Sep 2001 21:47:41 -0300 + +fetchmail (5.9.0-5) unstable; urgency=low + + * The "tidy-up before a long winter" release + * Fix ugly bogosity in fetchmail-up script, thanks to Jacek Kawa + <jfk@zeus.polsl.gliwice.pl> for the patch. I wonder what I was (not?) + thinking when I broke fetchmail-up... + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 20 Sep 2001 08:47:54 -0300 + +fetchmail (5.9.0-4) unstable; urgency=medium + + * Fix extremely stupid typo in fetchmail.config (closes: #112142) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 13 Sep 2001 15:12:37 -0300 + +fetchmail (5.9.0-3) unstable; urgency=low + + * Do not warn about the overriding of initscript defaults if system-wide + fetchmail is not active (closes: #110396) + * Change /bin/mail to /usr/bin/mail in fetchmail(1) (closes: #110820) + * fetchmailconf does not output empty plugin/plugout strings anymore + (closes: #106668, #106686). + * fetchmail: do strip /port# from LMTP addresses (closes: #98388) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 2 Sep 2001 11:57:56 -0300 + +fetchmail (5.9.0-2) unstable; urgency=low + + * Added strace capability to /etc/init.d/fetchmail debug-run, and updated + docs accordingly + * Detect missing /var/run or /var/run/fetchmail directory in initscript + (closes: #110076) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 26 Aug 2001 08:11:34 -0300 + +fetchmail (5.9.0-1) unstable; urgency=low + + * New upstream source: + * # characters now go to stdout, same place as the dots + * Matthias Andree's patch to correct parsing of spaces in quoted + usernames + * Do not complain/bomb out with an error if /etc/init.d/fetchmail is + missing, unless system-wide fetchmail is being switched from + disabled to enabled. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 15 Aug 2001 15:35:17 -0300 + +fetchmail (5.8.17-1) unstable; urgency=low + + * New upstream source: + * Eliminated second bounce on failed RCPT TO address. + * Always use fetchmail host's FQDN to identify the daemon when sending + bounce messages. + * Embarrassing bug of the month -- somehow, `skip' wasn't being + interpreted! + * Upstream integrated the security fix added to Debian in 5.8.16-1, + however I've added a warning should anyone attempt that exploit. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 8 Aug 2001 09:08:54 -0300 + +fetchmail (5.8.16-1) unstable; urgency=high + + * New upstream source: + * Refuse mail that has no good addresses and can't be sent to postmaster + * Restore behavior of discarding mail on 550 (closes: #105237) + * John Summerfield updated getfetchmail + * Lock-file-name bug reported by Scott Johnson + * Man page bugs pointed out by Andrew Benham + * POP3 end of session RSET on keep removed. Fixed in Debian in 5.8.14-1 + (closes: #104125) + * In IMAP, handle BAD and NO responses to FETCH gracefully + * Parse "no {syslog|invisible|showdots} properly + * Fixed bug in fetchmailconf plugin/plugout code (related to #105987) + * Handle ! in RFC2821 Return-Path addresses properly + * Fix typo in fetchmail(1), also done upstream (closes: #106925) + * SECURITY FIX: fix remote exploit on pop3 and imap protocols; Thanks + to Salvatore Sanfilippo <antirez@invece.org> for reporting the bug + and suggesting a patch to fix it. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 14 Jul 2001 12:38:26 -0300 + +fetchmail (5.8.14-2) unstable; urgency=low + + * Improved README.Debian file a little. Documented the fact that + system-wide fetchmail will refuse to start if there are errors in the + /etc/fetchmailrc file (closes: #105363). Documented how to properly + report bugs + * Added a debug-run initscript action that outputs proper debugging + information for reporting bugs + * Fix duplicate autotools-dev stuff in debian/rules clean target + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 14 Jul 2001 12:38:26 -0300 + +fetchmail (5.8.14-1) unstable; urgency=medium + + * New upstream source: + * Correction for backslash-handling patch in rfc822.c + * Fix for Debian Bug#103822: fetchmailconf fails to write file after + configuration; move .fetchmailrc to .fetchmailrc~ before overwriting + (closes: #103822) + * Discard Return-Path headers consisting of a single @ + * Make fetchmailconf dump plugin and plugout options properly + * Rob Brauns changes for building fetchmail outside its source directory + * Found (and killed) a subtle SMTP protocol error that was probably + lurking behind a lot of the bug reports related to bounce mail, thanks + to Quoc Luu. (Only manifested when the MTA rejected mail due to a bad + RCPT TO address) -- I think this closes: #88764 (hmh) + * Disable RSET before QUIT for pop3. This is a temporary measure, and I + might put it back soon (#104125) + * Fix serious configure.in bug that broke fallbacks to /usr/sbin/sendmail + (#104484) + * Fix assorted -Wall and build problems on upstream code + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 14 Jul 2001 12:38:26 -0300 + +fetchmail (5.8.12-1) unstable; urgency=low + + * New upstream source: + + Bug fix for envelope header skip + + ODMR finally seems to be working + + Handle multiple backslashes within RFC822 address strings correctly. + + Don't exit on a failure to DNS-resolve a mailserver name, just + make it inactive. Exit only if all lookups fail (closes: #99197) + + Restore code to deal with SMTP error responses at RCPT TO time, but + without issuing an RSET. This is intended to fix obscure bugs that + show up in recent Postfix releases and sendmail configurations that + delay antispam checks on the MAIL FROM line until RCPT TO time + (maybe fixes #88764) + * Add better autotools-dev support to debian/rules. Add devscripts to + build-depends because of this change + * Close standard input on initscript to make sure fetchmail won't ask + for passwords + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 7 Jul 2001 23:33:24 -0300 + +fetchmail (5.8.11-1) unstable; urgency=low + + * New upstream source: + + Add more ODMR fixes from Matt Armstrong <matt@lickey.com> + + Fix signal handling code (closes: #102711). Now, we do not reap + dead children until the end of a run when delivering to a MDA. + IF you use plugins and deliver to a MDA, you risk being overrun + by an army of undead. Don't do it, deliver through SMTP instead + + If a mail will be bounced to the postmaster AND postmaster is set to "" + (empty), don't try to forward it. Patch from Sunil Shetye + <shetye@bombay.retortsoft.com> + * Add polish template, thanks to Krzysztof Krzyzaniak + <eloy@transilvania.eu.org> (closes: #102667) + * More code cleanups for -Wall + * Recent bugfixes to other problems also fixed these: + (closes: #95370, #101950) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 3 Jul 2001 11:59:34 -0300 + +fetchmail (5.8.10-2) unstable; urgency=low + + * Recompile with dpkg 1.9.10 (closes: #102524, #102593) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 27 Jun 2001 13:42:34 -0300 + +fetchmail (5.8.10-1) unstable; urgency=low + + * New upstream source: + + ODMR fixes from Matt Armstrong <matt@lickey.com> + + The smtphost option has been split. It is no longer overloaded to set + the list of domains to be queried in ETRN and ODMR modes. Instead, + use the `fetchdomains' option. + + Fixes for the new message-marking code from Thomas Moestl + * Fix incorrect usage of strncat in 5.8.8-2 patch (also done upstream) + * Normalize tab usage on fetchmailconf (to keep #102052 closed) + * Fixed some -Wall warnings + * Added menu icon for fetchmailconf + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 26 Jun 2001 00:25:56 -0300 + +fetchmail (5.8.8-3) unstable; urgency=low + + * Finally managed to track down and terminate the last remaining + necromantic bug that liked keeping zombie children around for nefarious + needs (closes: #95659) + * Normalize tab usage on fetchmailconf (closes: #102052) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 24 Jun 2001 00:27:11 -0300 + +fetchmail (5.8.8-2) unstable; urgency=low + + * Fix warning about syslog/daemon overrides; now assume the warning should + be given at least once, if it cannot be verified to be uneeded. + * Replace numerous sprintfs with snprintf to avoid some remote + possibilities of a formatstring exploit exist. Same for strcat. + * Cleaned up lots of warnings (most of them justified) from gcc + * Debug builds now disable optimizations + * Dirty fix for ok in (driver.c)fetch_messages getting out of scope + for do_session (closes: #101792) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 23 Jun 2001 02:37:30 -0300 + +fetchmail (5.8.8-1) unstable; urgency=low + + * New upstream source + + Fix bug that prevented messages from being marked oversized + unless -v was on + + Steven Krings's patch to deal with over-long header lines + + Chris Maio's patch for POP3 with BSMTP + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 21 Jun 2001 11:51:18 -0300 + +fetchmail (5.8.7-2) unstable; urgency=low + + * fetchmailconf: Enclose local user names in quotes to avoid parse error + if numeric (closes: #101500) + * Add recently added .c files to po/POTFILES.in. Thanks to Byrial Jensen + <byrial@image.dk> for the patch + * Fix multidrop problem caused by the security fix in 5.8.5-2. Thanks to + Steve M.Robbins <steven.robbins@videotron.ca> for tracking this bug + down, and supplying a patch. Don't I feel dumb now for this mistake... + No more coding security fixes at 03:00 in the morning for me + (closes: #101530) + * Fix undue parameter expansion when generating postinst from template + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 19 Jun 2001 23:08:59 -0300 + +fetchmail (5.8.7-1) unstable; urgency=low + + * This release marks the start of a major code rewrite in fetchmail, so I + expect things to break. It doesn't help that I had to do a very + extensive list of changes in the packaging for 5.8.6-3. This is + unstable, therefore I'm not too concerned. However, you might want to + stick to 5.8.6-2 and wait for a few days to see if any major bugs show + up in the BTS before upgrading. You have been warned. + * New upstream source + + Fix fetchmailconf support for tracepolls (closes: #101242) + + driver.c refactoring in preparation for streaming mode + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 18 Jun 2001 11:26:41 -0300 + +fetchmail (5.8.6-3) unstable; urgency=medium + + * Applied patch from Byrial Jensen <byrial@image.dk> to make the + tracepools RFC-2822 compliant. Also, fixed bogus reference to + --adaccthdr in fetchmail --help + * Generate the postinst script in debian/rules from init.defaults and + *.postinst.template, to avoid poluting /usr/share or sync loss between + postinst and init.defaults + * Fix segfault-waiting-to-happen in driver.c. Thanks to Stephan Krings + <stephan@xmn-berlin.de> for noticing it + * /etc/default/fetchmail is not a conffile anymore. User-made changes are + still supported, but any changes made by me will not be propagated + anymore on upgrades. The "up-to-date" version of the configuration file + (including defaults and comments) is in the examples directory in the + documentation (closes: #101025) + * Disable fetchmailconf support for tracepolls until bug#101242 gets + fixed upstream + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 18 Jun 2001 02:50:34 -0300 + +fetchmail (5.8.6-2) unstable; urgency=low + + * Clean-up upstream cruft automatically, to make sure it won't choke an + --with-included-gettext build (not normally used in Debian, but who + knows...). This is needed because diff cannot delete files + * Running fetchmail as root is dangerous. The safest way is to run it as a + very unpriviledged user (you could even chroot it, I suppose) and + deliver over smtp. Stress this on the documentation + * Fix initscript so that it will work with POSIXLY_CORRECT set, thanks + "Sven M. Hallberg" <pesco@gmx.de> + * Do not abort postinst/prerm if the initscript fails (closes: #100832) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 14 Jun 2001 11:12:53 -0300 + +fetchmail (5.8.6-1) unstable; urgency=low + + * New upstream source + - Reject candidate headers for the MAIL FROM address that have \n in + them + - Add capability to insert poll trace data in the Received line + - Brendan Kehoe's patch to avoid doing DNS lookups on skip entries + (helps with #99197, but doesn't fix the whole issue) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 12 Jun 2001 13:28:19 -0300 + +fetchmail (5.8.5-2) unstable; urgency=high + + * Security fix: buffer overflow when rewriting headers longer than 512 + bytes (closes : #100394) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 12 Jun 2001 02:34:50 -0300 + +fetchmail (5.8.5-1) unstable; urgency=low + + * New upstream version + + Interface option fix from Alexander Kourakov. + + Attempted fix for Harry McGavran's problems with the Kerberos V build. + + Added fetchmailnochda.pl to the contrib directory. + + Sunil Shetye's patches for the seen count on IMAP and auto protocol. + * Fixed typo in logcheck.ignore (closes: #99706) + * Removed top_srcdir="." directive in debian/rules, as it broke the build + with new gettext and autoconf + * At least two known (and bad) bugs waiting for upstream fix. See + TODO.Debian in the source package -- they're not new bugs, AFAIK. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 2 Jun 2001 12:49:23 -0300 + +fetchmail (5.8.4-1) unstable; urgency=low + + * New upstream version + + New README.SSL file. If you use SSL, read it; tied to: + + New SSL certificate options from Thomas Moestl <tmoestl@gmx.net> + + Frantisek Brabec's patch for better UIDL error recovery + + Jorg de Jong's patch attempts to handle spaces in the ID part of UIDLs + (this probably closes: #96489) + * Fixed small typo in manpage + * Very minor fixes to work with autoconf 2.50 + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 22 May 2001 22:42:13 -0300 + +fetchmail (5.8.3-2) unstable; urgency=medium + + * The "Zombie-Child Reaper" release + * Split changelogs (including upstream's), to remove old cruft. + No information was lost, the complete changelogs are available + in the source package + * Serious attempt to allow all dead children to go peacefully to + the Big Bitbucket In The Sky. Signal handling was really screwed + up in Linux glibc 2.2 systems (and maybe others) (closes: #95659) + * fetchmailconf would generate bogus output if the monitor or + netsec options where enabled (closes: #98127) + * Use autotools-dev to make sure we need not worry about + config.{sub,guess} again. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 21 May 2001 11:42:13 -0300 + +fetchmail (5.8.3-1) unstable; urgency=medium + + * The "major pain in the neck" release + * New upstream release + - Don't cough and die from failure to resolve a skipped host + (closes: #92530, #92554) + - SIGCHLD handler now sets SA_RESTART explicitly in order to avoid + zombies from interrupted system calls (closes: #95993) + - Do aka suffix match even if DNS checking is enabled + - Prevent POP3 code from authenticating multiple times on success + - Fixed IMAP password shrouding + - Ignore Sender and Resent-Sender headers unless they contain @ + + The `localhost' special case of `via' is gone. Use `plugin %h' for + talking to ssh instead. THIS IS AN INCOMPATIBLE CHANGE IN + .fetchmailrc SEMANTICS. If you are using this for ssh tunnelling, + you may need to switch to using a plugin option with %h + SEE THE FAQ and fetchmail(1) manpage. + * Also set SA_NOCLDSTOP on SIGCHLD handler, we'll timeout the child + * Update German template, thanks blade@debian.org (closes: #97155) + * Add Galician template, thanks Jacobo Tarrio <jtarrio@trasno.net> + * Fixed build-dependency: libssl096-dev -> libssl-dev + * Honour /etc/default/fetchmail's CONFFILE in debconf warning tests + * Trust base-files to manage /var/mail, update policy compliance to + 3.5.4 and add the proper depends on base-files >= 2.2.0. This + reduces the mess on many of the scripts, which is a Good Thing. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 13 May 2001 14:35:58 -0300 + +fetchmail (5.8.1-6) unstable; urgency=low + + * The "I should not have got out of bed yesterday" release + * Fix broken handling of debconf defaults in fetchmail.config + (closes: #96648) + * Fix handling of /etc/default/fetchmail for $SERVICE when first + adding SERVICE to the config file + * Fix annoying postinst bogosity when creating the fetchmail user + * Add user-is-really-there test to initscript to close a bogon source + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 7 May 2001 16:53:08 -0300 + +fetchmail (5.8.1-5) unstable; urgency=low + + * The "I told you, didn't I?" release + * Warn users that ssh needs to be able to read the RSA/DSA keys to work, + and that means they must run the system-wide fetchmail as root. + * Debconf "no system-wide fetchmail" master switch added. Use + dpkg-reconfigure to re-enable it, or cry silently at the resulting + breakage if you don't know what you're doing. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 5 May 2001 23:58:05 -0300 + +fetchmail (5.8.1-4) unstable; urgency=low + + * The "A Debian developer's way is fraught with peril" release + * New Dutch template, thanks Thomas J. Zeeman (closes: #95737) + * Add debconf and initscript support to run the system-wide fetchmail + daemon as user fetchmail. It is safer, but it won't work if + fetchmail is told to deliver to a MDA. Unfortunately, now the + initscript violates the KISS principle quite throughoutly. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 5 May 2001 01:57:50 -0300 + +fetchmail (5.8.1-3) unstable; urgency=low + + * Small fixes to Makefile.in to finally have proper builds with all + possible gettext profiles (none, included, system's). + * New german template translations, thanks Sebastian Feltel (closes: #94529) + * Fix typo in templates.br (pt-br -> pt_BR) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 19 Apr 2001 15:32:15 -0300 + +fetchmail (5.8.1-2) unstable; urgency=medium + + * Fix upload screwup. No changes + * Use MULTIDROP(foo) in #92544 fix patch + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 12 Apr 2001 00:41:09 -0300 + +fetchmail (5.8.1-1) unstable; urgency=medium + + * The "it's time for the spring cleanup" release + * New upstream source + - Nalin Dahyabai's password parsing and authentication fixes. + - Golden brand (5.8.0) + * New upstream gettext 0.10.36 used instead of fetchmail upstream's. From + now on, Debian builds will always include the newest Debian packaged + version of gettext in the package source, just in case (we do not use + it, though) + * Build tweaks: to make sure new gettext will work, debian/rules clean now + adds execute permissions to all files that should have them, instead of + trusting the upstream tarball + * Switch to debhelper DH_COMPAT mode 3 + * Kerberos build support in fetchmail is NOT sane. I don't have a very + good way to test this stuff (and I don't think upstream can, either...), + but I'll try to at least clean it up to the point of it building + out-of-the-box using the multiple kerberos packages available in Debian. + This probably closes: #92793. + - configure changes to properly detect and work with heimdal-dev, + kerberos4kth-dev and krb5-dev. Do notice heimdal-dev does not provide + kerberosIV compatibility in Debian, you need kerberos4kth-dev too if + you need it (configure.in). Also, Heimdal builds *require* OpenSSL + support (due to Debian's packaging of Heimdal). + - rfc1731 seems to require kerberosIV support as far as I can tell from + RFCs, and the imap.c code agrees with this. This means that now KPOP + is only available if kerberosIV is as well. Do remember that GSSAPI + does not require kerberosIV and will work in kerberosV-only setups + (pop3.c) + * Fix typo in logcheck.ignore file (closes: #93215) + * Initscript fixed to not lie about fetchmail already running when it + fails to start (e.g. due to bad DNS) (closes: #93316) + * Do not use the poll name when using "via localhost" unless it is + a multidrop poll. (partialy addresses #92554) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 11 Apr 2001 12:09:35 -0300 + +fetchmail (5.7.7-2) unstable; urgency=low + + * Fix postrm purge target (closes: #92361) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 1 Apr 2001 01:43:41 -0300 + +fetchmail (5.7.7-1) unstable; urgency=low + + * New upstream source (but not really) + - No changes from 5.7.6-3 in Debian + * Build tweaks: now debian/rules makes sure the autotools are never run + so they have been dropped from build-depends. + * "--user root" was lost somehow from the initscript, probably in + one of those late-night hack-the-initscript sessions. Add it + back (closes: #92124) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Fri, 30 Mar 2001 00:45:57 -0300 + +fetchmail (5.7.6-3) unstable; urgency=low + + * The "GNU autotools are a pain in the arse" release + * I'm now using a full CVS-style autogen.sh approach. This will + make fetchmail far more friendly to newly debian-supported archs, + such as ia64 and hppa which need up-to-date config.guess or config.sub + support. I just hope nothing got broken in the process... + * Added menu entry for fetchmailconf + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 28 Mar 2001 01:36:40 -0300 + +fetchmail (5.7.6-2) unstable; urgency=low + + * Fix broken support for build without autoconf/autoheader + * Added CVS version info to many debian/ files + * Remind user that /etc/fetchmailrc is not removed on package + purge (we don't provide it, after all...) + * Fix bug in sink.c that would cause some SMTP errors not to be + correctly echoed to the log (e.g. 452 Out of storage) + (closes: #90966) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 25 Mar 2001 11:28:48 -0300 + +fetchmail (5.7.6-1) unstable; urgency=low + + * New upstream source + - IMAP: don't just quit if GSSAPI or Kerberos IV fail, but + try other methods + - Document the fact the IDLE and multiple folders don't play + well together (closes: #89908) + * Use -pipe for gcc in debian/rules + * Remove a lot of useless or dangerous cruft from contrib/ + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 22 Mar 2001 21:22:27 -0300 + +fetchmail (5.7.5-2) unstable; urgency=high + + * Fix POP2 build breackage + * Fix POP3 password leakage in fetchmail -v (closes: #90176) + * Try to compensate for broken sudo setups not correctly + setting ${HOME} for root, without actually breaking it for + people that have root's homedir elsewhere than /root + (closes: #90180) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 18 Mar 2001 23:40:58 -0300 + +fetchmail (5.7.5-1) unstable; urgency=low + + * New upstream source + * Add IPV6 and IPV6SEC build-time options to debian/rules + * Document in rcfile_y.y that "interface" is not available in + ipv6 builds + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 15 Mar 2001 19:30:23 -0300 + +fetchmail (5.7.4-3) unstable; urgency=low + + * Build-depends only in mail-transport-agent, as autobuilders do not + use the OR dependency. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 14 Mar 2001 14:57:55 -0300 + +fetchmail (5.7.4-2) unstable; urgency=low + + * Fixed build-depends (for fallback MDA) + * Suggests: mail-transport-agent + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 12 Mar 2001 21:57:18 -0300 + +fetchmail (5.7.4-1) unstable; urgency=low + + * New upstream source + - fetchmail now has a fallback MDA strategy for when it cannot connect + to the SMTP sink. Since not everyone will want to install and configure + procmail just because of fetchmail, we use /usr/sbin/sendmail as the + fallback strategy (works with exim, sendmail and postfix. Other MTAs + not tested) + * Patched to allow user to choose fallback strategy + * New conffile for initscript, /etc/default/fetchmail. This allows for + a default --daemon and --syslog behaviour, but will get in the way of + the clueful people who did the right thing and used set daemon and + set syslog in /etc/fetchmailrc (closes: #89343) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 11 Mar 2001 20:26:56 -0300 + +fetchmail (5.7.2-4) unstable; urgency=low + + * Added support for systems where aclocal and autoconf are not available + (which actually mean autoconf and automake can be removed from the + build-depends, but I'd rather have them installed when building + fetchmail) + * Better changelog for fetchmail-ssl + * Fix unsafe tempfile handling in fetchmailconf (closes: #89238) + Thanks go to Colin Phipps for the patch + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 11 Mar 2001 13:02:15 -0300 + +fetchmail (5.7.2-3) unstable; urgency=low + + * Fix bug in IMAP mailbox check (triggered by --check) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 7 Mar 2001 15:10:00 -0300 + +fetchmail (5.7.2-2) unstable; urgency=low + + * Fix IPv6 SA_LEN patch + * GSSAPI wouldn't compile due to syntax errors + * PROG_MAKE_SET was missing in configure.in + * Installs logcheck ignore files for the "C" locale + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 7 Mar 2001 00:03:48 -0300 + +fetchmail (5.7.2-1) unstable; urgency=low + + * New upstream source + * Fixed SA_LEN for glibc 2.2.2 and IPv6 + * Rebuilt NLS support (configure, makefiles) from scratch. Many thanks to + Nicolás Lichtmaier, who helped me a lot to figure out what was broken, + and why + * Warn user to move /root/.fetchids to new location (closes: #88658) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 5 Mar 2001 09:05:39 -0300 + +fetchmail (5.7.1-2) unstable; urgency=low + + * Seamless *build-time* support for kerberos IV and V, as well as for many + optional configure targets for fetchmail. This allows easy building of custom + fetchmail packages, supporting, e.g. POP2 or GSSAPI. See README.Debian and + debian/rules files for more information. (closes: #33317) + * Fix fetchmailconf "nospambounce" bug + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 4 Mar 2001 13:09:46 -0300 + +fetchmail (5.7.1-1) unstable; urgency=low + + * New upstream source + - manpage updates + - new --sslproto option + * Patched to fix NLS build + * Patched to fix SSL build + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 4 Mar 2001 05:43:50 -0300 + +fetchmail (5.7.0-2) unstable; urgency=low + + * Patch from upstream: do not attempt SASL on KPOP servers, + instead send USER and a fake PASS (closes: #88288) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 3 Mar 2001 19:19:54 -0300 + +fetchmail (5.7.0-1) unstable; urgency=low + + * New upstream source, fixes issues with fetchmailconf + * Patched to avoid breakage in NLS support + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 3 Mar 2001 08:29:43 -0300 + +fetchmail (5.6.8-3) unstable; urgency=low + + * Fix imap timeout when talking to Micoshaft Exchange + servers (closes: #87908) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 28 Feb 2001 19:10:52 -0300 + +fetchmail (5.6.8-2) unstable; urgency=low + + * Remind users that daemon means daemon (closes: #87580) + * Make sure fetchmail is started on ip-up (closes: #87577) + * Removed findutils from build-depends. + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 25 Feb 2001 12:59:51 -0300 + +fetchmail (5.6.8-1) unstable; urgency=low + + * New upstream source + Upstream has changed the syntax of "preauth" back to "auth", + please update your fetchmail configuration files. + * Maintainer scripts are now able to handle the sharing of + /etc/init.d/fetchmail by fetchmail and fetchmail-ssl without + causing problems during purge + * Avoid causing health problems during system boot ;-) (closes: #86885) + * "Improved" fetchmail-up and fetchmail-down scripts (closes: #86924) + This *will* bite your arse if you use PPP and don't read README.Debian; + Given the debconf annoyance I've added, and this changelog entry, consider + yourself warned and go read the README.Debian. + * Debconf support added to warn people about the init.d and ppp + scripts changes. + * Added missing Suggests: fetchmailconf to fetchmail-ssl + * Added missing xutils to Build-Depends: (for makedepend) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Wed, 21 Feb 2001 12:35:19 -0300 + +fetchmail (5.6.7-2) unstable; urgency=medium + + * Instead of reverting the change in driver.c, apply fix + * New CRAM-MD5 code is fully RFC-compliant, closes: #86667, #86474 + * Add warning to fetchmailconf for local usernames with embedded '@' + Closes: #82514 + + -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 20 Feb 2001 05:20:39 -0300 + +fetchmail (5.6.7-1) unstable; urgency=medium + + * New upstream source: + - Fixes pop3 AUTH/CAPA stuff so as to be rfc-compliant + * Please note 5.6.5 made changes to the fetchmailrc format, related + to the fact that many authorization features (such as CRAM-MD5) are now + auto-detected for both IMAP and POP3 + * Reverted change done to driver.c in 5.6.6 which caused fetchmail to emit + wrong status messages on timeouts when opening the mail server (source) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 19 Feb 2001 21:27:37 -0300 + +fetchmail (5.6.6-2) unstable; urgency=medium + + * The "children should not make fun of their elders" release + * Fetchmail wouldn't ask for passwords anymore (closes: #86350) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 17 Feb 2001 10:33:38 -0200 + +fetchmail (5.6.6-1) unstable; urgency=medium + + * New upstream source + * The "let's get that old maid out of testing" release + * No more asking for a password when using ETRN (closes: #85938) + * Don't issue AUTH between USER and PASS (closes: #85853, #86047) + * Different error message when local connection fails (closes: #85961) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Fri, 16 Feb 2001 17:28:11 -0200 + +fetchmail (5.6.5-3) unstable; urgency=low + + * Locales were not being correctly setup (closes: #73614) + * Applied patches to allow build with Kerberos IV (closes: #85772) + * /etc/init.d/fetchmail script for system-wide mail delivery, + create file /etc/fetchmailrc to enable. Deleted bogus + debian_rc file from the contrib dir to avoid confusing users. + (closes: #66251, #77804) + + -- Henrique de Moraes Holschuh <hmh@debian.org> Thu, 15 Feb 2001 17:27:56 -0200 + +fetchmail (5.6.5-2) unstable; urgency=low + + * Added hack from hell to generate fetchmail-ssl from the same source tree + * New fetchmail-ssl package, recompiled against up-to-date unstable + closes: #82073, #84427, #76240, #78362, #43179, #79153, #60949 + closes: #79967, #82503, #84434, #59584, #50421, #66624 + * Suggests fetchmailconf (closes: #69069) + * Bugs fixed by 5.5.4 and above: + closes: #75011, #70862, #69358, #69199, #66110, #63667 + closes: #62115, #61983, #59698 + probably closes: #80344 + * This is a new version (closes: #66824) + * Ported to debhelper v3, mode v2 (i.e. rebuilt debian/rules), and + fixed all crosstalk between the fetchmail and fetchmailconf packages. + Closes: #76240, #79967, #54132, #55205 + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 12 Feb 2001 15:25:18 -0200 + +fetchmail (5.6.5-1) unstable; urgency=low + + * New upstream source + * Closing bugs fixed by versions 5.5.4 and above: + closes: #78963, #63064, #65505, #81312, #78796, #78363 + closes: #68627, #63088, #71428 + + -- Henrique de Moraes Holschuh <hmh@debian.org> Mon, 12 Feb 2001 12:49:22 -0200 + +fetchmail (5.6.4-1) unstable; urgency=low + + * New upstream source + * Package is now compliant with policy 3.5.0.0 + * Fixed stupid screwup that might stop an autobuild in debian/rules + * Tentative build-depends. Please file a bug if it doesn't work + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sun, 11 Feb 2001 14:24:42 -0200 + +fetchmail (5.6.3-1) unstable; urgency=low + + * New upstream source + * New maintainer. Paul orphaned the package, and the other person who + should become the new fetchmail maintainer went MIA without so + much as uploading a new package or finishing his NM application + * Minor package cleanups + + -- Henrique de Moraes Holschuh <hmh@debian.org> Sat, 10 Feb 2001 21:55:06 -0200 diff --git a/debian/clean b/debian/clean new file mode 100644 index 00000000..5a8b3c5f --- /dev/null +++ b/debian/clean @@ -0,0 +1,2 @@ +config.log +po/*.gmo diff --git a/debian/control b/debian/control new file mode 100644 index 00000000..fa036855 --- /dev/null +++ b/debian/control @@ -0,0 +1,32 @@ +Source: fetchmail +Section: mail +Priority: optional +Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> +Build-Depends: debhelper-compat (= 13), pkg-config, flex, libssl-dev (>= 3.1.4), bison, libkrb5-dev, libgssglue-dev +Standards-Version: 4.6.2 +Rules-Requires-Root: no +Homepage: https://www.fetchmail.info + +Package: fetchmail +Architecture: any +Pre-Depends: init-system-helpers (>= 1.52) +Depends: ${shlibs:Depends}, ${misc:Depends}, debianutils (>= 1.7), adduser (>= 3.34), sysvinit-utils (>= 3.05-4~) | lsb-base +Breaks: logcheck (<< 1.1.1-9), fetchmail-ssl (<= 6.2.5-12) +Conflicts: fetchmail-common +Replaces: fetchmail-common, fetchmail-ssl +Provides: fetchmail-ssl +Suggests: fetchmailconf, default-mta | mail-transport-agent, resolvconf +Recommends: ca-certificates +Description: SSL enabled POP3, APOP, IMAP mail gatherer/forwarder + fetchmail is a free, full-featured, robust, and well-documented remote mail + retrieval and forwarding utility intended to be used over on-demand TCP/IP + links (such as SLIP or PPP connections). It retrieves mail from remote mail + servers and forwards it to your local (client) machine's delivery system, so + it can then be read by normal mail user agents such as mutt, elm, pine, + (x)emacs/gnus, or mailx. The fetchmailconf package includes an interactive + GUI configurator suitable for end-users. + . + Kerberos V and GSSAPI are supported. + . + Kerberos IV, RPA, OPIE and other support for some other features are + available if the package is recompiled. diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 00000000..adbecd91 --- /dev/null +++ b/debian/copyright @@ -0,0 +1,311 @@ +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: fetchmail +Upstream-Contact: https://www.fetchmail.info +Source: https://gitlab.com/fetchmail/fetchmail/ + +Files: * +Copyright: 2005-2021 Matthias Andree + 2005-2012 Sunil Shetye + 1987-2012 Free Software Foundation, Inc. + 2004 Matthias Andree + 2004 Robert M. Funk + 2004 Graham Wilson + 1997-2004 Eric S. Raymond + 1996-1997 George M. Sipe + 1993-1995 Carl E. Harris +License: GPL-2+ with OpenSSL exception + Copyright retained for the purpose of protecting free software redistribution. + Specific permission is granted for the GPLed code in this distribition to + be linked to OpenSSL without invoking GPL clause 2(b). + . + The full text of the GNU General Public License is available in + /usr/share/common-licenses/GPL-2. + +Files: aclocal.m4 + config.rpath +Copyright: 1996-2011 Free Software Foundation, Inc + 1996 Gordon Matzigkeit <gord@gnu.ai.mit.edu> +License: FSFAP + This file is free software; the Free Software Foundation gives + unlimited permission to copy and/or distribute it, with or without + modifications, as long as this notice is preserved. + . + This program is distributed in the hope that it will be useful, but + WITHOUT ANY WARRANTY, to the extent permitted by law; without even + the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR + PURPOSE. + +Files: beos/* +Copyright: 1983-1999 The Regents of the University of California +License: BSD-4-Clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + 3. All advertising materials mentioning features or use of this software + must display the following acknowledgement: + This product includes software developed by the University of + California, Berkeley and its contributors. + 4. Neither the name of the University nor the names of its contributors + may be used to endorse or promote products derived from this software + without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND + ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE + FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + SUCH DAMAGE. + +Files: contrib/runfetchmail + idle.c + rfc822.c +Copyright: 1997 Eric S. Raymond <esr@thyrsus.com> + 1997 Doug Muth, Wescosville, Pennsylvania USA +License: Expat + Permission is hereby granted, free of charge, to any person obtaining + a copy of this software and associated documentation files (the + "Software"), to deal in the Software without restriction, including + without limitation the rights to use, copy, modify, merge, publish, + distribute, sublicense, and/or sell copies of the Software, and to + permit persons to whom the Software is furnished to do so, subject to + the following conditions: + . + The above copyright notice and this permission notice shall be + included in all copies or substantial portions of the Software. + . + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, + EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF + MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND + NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS + BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN + ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN + CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE + SOFTWARE. + +Files: install-sh +Copyright: 1994 X Consortium +License: MIT-X-Consortium + Permission is hereby granted, free of charge, to any person obtaining a copy + of this software and associated documentation files (the "Software"), to + deal in the Software without restriction, including without limitation the + rights to use, copy, modify, merge, publish, distribute, sublicense, and/or + sell copies of the Software, and to permit persons to whom the Software is + furnished to do so, subject to the following conditions: + . + The above copyright notice and this permission notice shall be included in + all copies or substantial portions of the Software. + . + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR + IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, + FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE + X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN + AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC- + TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + . + Except as contained in this notice, the name of the X Consortium shall not + be used in advertising or otherwise to promote the sale, use or other deal- + ings in this Software without prior written authorization from the X Consor- + tium. + +Files: KAME/* +Copyright: 1995-1998 WIDE Project +License: BSD-3-Clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + 3. Neither the name of the project nor the names of its contributors + may be used to endorse or promote products derived from this software + without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + SUCH DAMAGE. + +Files: libesmtp/* +Copyright: 2001-2002 Brian Stafford <brian@stafford.uklinux.net> +License: LGPL-2.1+ + This library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + . + This library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + . + The full text of the GNU Lesser General Public License is available + in /usr/share/common-licenses/LGPL-2.1. + +Files: rcfile_y.c + rcfile_y.h +Copyright: 1984-2011 Free Software Foundation, Inc. +License: GPL-3+ with bison exception + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + . + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + . + You should have received a copy of the GNU General Public License + along with this program. If not, see <https://www.gnu.org/licenses/>. */ + . + As a special exception, you may create a larger work that contains + part or all of the Bison parser skeleton and distribute that work + under terms of your choice, so long as that work isn't itself a + parser generator using the skeleton or a modified version thereof + as a parser skeleton. Alternatively, if you modify or redistribute + the parser skeleton itself, you may (at your option) remove this + special exception, which will cause the skeleton and the resulting + Bison output files to be licensed under the GNU General Public + License without this special exception. + +Files: ntlm.h + smb*.c + smb*.h +Copyright: 1992-1998 Andrew Tridgell + 1995 Jeremy Allison +License: GPL-2+ with link exception + Tridge has granted a specific exemption for his GPL-licensed code to + be linked with non-GPL-compliant code in fetchmail. + . + The full text of the GNU General Public License is available in + /usr/share/common-licenses/GPL-2. + +Files: md5c.c +Copyright: 1993 Colin Plumb +License: public-domain + No copyright is claimed. + The algorithm is due to Ron Rivest. + This code is in the public domain; do with it what you wish. + +Files: m4-local/ac_ma_search_package.m4 +Copyright: 2001-2004 Caolan McNamara <caolan@skynet.ie> + 2001-2004 Alexandre Duret-Lutz <duret_g@lrde.epita.fr> + 2001-2004 Matthew Mueller <donut@azstarnet.com> + 2001-2004 Matthias Andree <matthias.andree@gmx.de> +License: GPL-2+ with autoconf exception + Please note that every macro contained in this archive is copyrighted + by its respective author, unless the macro source explicitly says + otherwise. Permission has been granted, though, to use and distribute + all macros under the following license, which is a modified version of + the GNU General Public License version 2: + . + Every Autoconf macro presented on this web site is free software; + you can redistribute it and/or modify it under the terms of the GNU + General Public License as published by the Free Software + Foundation; either version 2, or (at your option) any later + version. + . + They are distributed in the hope that they will be useful, but + WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + General Public License for more details. + . + The full text of the GNU General Public License is available in + /usr/share/common-licenses/GPL-2. + . + As a special exception, the Free Software Foundation gives + unlimited permission to copy, distribute and modify the configure + scripts that are the output of Autoconf. You need not follow the + terms of the GNU General Public License when using or distributing + such scripts, even though portions of the text of Autoconf appear + in them. The GNU General Public License (GPL) does govern all other + use of the material that constitutes the Autoconf program. + . + Certain portions of the Autoconf source text are designed to be + copied (in certain cases, depending on the input) into the output + of Autoconf. We call these the "data" portions. The rest of the + Autoconf source text consists of comments plus executable code that + decides which of the data portions to output in any given case. We + call these comments and executable code the "non-data" portions. + Autoconf never copies any of the non-data portions into its output. + . + This special exception to the GPL applies to versions of Autoconf + released by the Free Software Foundation. When you make and + distribute a modified version of Autoconf, you may extend this + special exception to the GPL to apply to your modified version as + well, *unless* your modified version has the potential to copy into + its output some of the text that was the non-data portion of the + version that you started with. (In other words, unless your change + moves or copies text from the non-data portions to the data + portions.) If your modification has such potential, you must delete + any notice of this special exception to the GPL from your modified + version. + +Files: trio/* + ucs/*.c +Copyright: 2002-2003 Markus Kuhn + 1998-2001 Bjorn Reese + 1998-2001 Daniel Stenberg +License: ISC + Permission to use, copy, modify, and distribute this software for any + purpose with or without fee is hereby granted, provided that the above + copyright notice and this permission notice appear in all copies. + . + THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE AUTHORS AND + CONTRIBUTORS ACCEPT NO RESPONSIBILITY IN ANY CONCEIVABLE MANNER. + +Files: debian/* +Copyright: + 2015- Laszlo Boszormenyi (GCS) <gcs@debian.org> + 2018 Nicolas Boulenguez <nicolas@debian.org> + 2005-2016 Nico Golde <nion@debian.org> + 2005-2016 Héctor GarcÃa <hector@debian.org> + 2005 Lucas Wall <lwall@debian.org> + 2005 Loic Minier <lool@dooz.org> + 2003-2004 Graham Wilson <graham@debian.org> + 2002-2003 Benjamin Drieu <benj@debian.org> + 2001-2002 Henrique M. Holschuh <hmh@debian.org> + 1996-2002 Paul Haggart <phaggart@debian.org> +License: GPL-2+ + +Files: debian/tests/* +Copyright: 2019 Bryce Harrington <bryce@canonical.com> +License: GPL-2+ + +License: GPL-2+ + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + . + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + . + You should have received a copy of the GNU General Public License along + with this program; if not, write to the Free Software Foundation, Inc., + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. +Comment: On Debian systems, the complete text of the GNU General Public + License v2 can be found in `/usr/share/common-licenses/GPL-2'. diff --git a/debian/fetchmail.default b/debian/fetchmail.default new file mode 100644 index 00000000..c145c37e --- /dev/null +++ b/debian/fetchmail.default @@ -0,0 +1,11 @@ +# This file will be used to declare some vars for fetchmail +# +# Uncomment the following if you don't want localized log messages +# export LC_ALL=C + +# If you want to specify any additional OPTION to the start +# scripts specify them here +# OPTIONS=... + +# Declare here if we want to start fetchmail. 'yes' or 'no' +START_DAEMON=no diff --git a/debian/fetchmail.doc-base b/debian/fetchmail.doc-base new file mode 100644 index 00000000..5c47447a --- /dev/null +++ b/debian/fetchmail.doc-base @@ -0,0 +1,10 @@ +Document: fetchmail +Title: Fetchmail Documentation +Author: Eric S. Raymond, Matthias Andree, Carl E. Harris, George M. Sipe +Abstract: This documentation covers the FAQ and features of fetchmail. +Section: Network/Communication + +Format: HTML +Index: /usr/share/doc/fetchmail/fetchmail-features.html +Files: /usr/share/doc/fetchmail/fetchmail-*.html + diff --git a/debian/fetchmail.docs b/debian/fetchmail.docs new file mode 100644 index 00000000..163821f8 --- /dev/null +++ b/debian/fetchmail.docs @@ -0,0 +1,9 @@ +design-notes.html +fetchmail-FAQ.html +fetchmail-features.html +todo.html +OLDNEWS +NEWS +README.SSL +contrib/systemd/README.systemd +debian/README.contrib diff --git a/debian/fetchmail.examples b/debian/fetchmail.examples new file mode 100644 index 00000000..4fb6f913 --- /dev/null +++ b/debian/fetchmail.examples @@ -0,0 +1 @@ +debian/fetchmailrc.example diff --git a/debian/fetchmail.init b/debian/fetchmail.init new file mode 100644 index 00000000..a6fbcb0e --- /dev/null +++ b/debian/fetchmail.init @@ -0,0 +1,248 @@ +#!/bin/sh +# +# Fetchmail init script +# Latest change: Do Aug 30 16:04:39 CEST 2012 +# +### BEGIN INIT INFO +# Provides: fetchmail +# Required-Start: $network $local_fs $remote_fs $syslog +# Required-Stop: $remote_fs +# Should-Start: $mail-transport-agent postfix exim4 $named +# Should-Stop: $mail-transport-agent postfix exim4 +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: init-Script for system wide fetchmail daemon +# Description: Enable service provided by fetchmail in daemon mode +### END INIT INFO +# +# A fetchmailrc file containg hosts and passwords for all local users should be +# placed in /etc/fetchmailrc. Remember to make the /etc/fetchmailrc mode 600 +# to avoid disclosing the users' passwords. +# +# This script will NOT start or stop fetchmail if the /etc/fetchmailrc file +# does not exist or if START_DAEMON in /etc/default/fetchmail is set to no. + +set -e + +# Defaults +PATH=/sbin:/bin:/usr/sbin:/usr/bin +DAEMON=/usr/bin/fetchmail +USER=fetchmail +OPTIONS="" + +CONFFILE="/etc/fetchmailrc" +PIDFILE="/var/run/fetchmail/fetchmail.pid" +UIDL="/var/lib/fetchmail/.fetchmail-UIDL-cache" +START_DAEMON="no" + +. /lib/lsb/init-functions + +if [ -r /etc/default/fetchmail ]; then + . /etc/default/fetchmail +fi + +OPTIONS="$OPTIONS -f $CONFFILE --pidfile $PIDFILE" + +if [ ! "x$START_DAEMON" = "xyes" -a ! "$1" = "status" ]; then + log_action_msg "Not starting fetchmail daemon, disabled via /etc/default/fetchmail" + exit 0 +fi + +if [ ! -e $CONFFILE ]; then + log_failure_msg "$CONFFILE not found." + log_failure_msg "can not start fetchmail daemon... consider disabling the script" + exit 6 +fi + + +test -f $DAEMON || exit 0 + +if [ "$1" = "start" ]; then + if [ ! -r $CONFFILE ] ; then + log_failure_msg "$CONFFILE found but not readable." + exit 0 + fi +fi + + +# sanity checks (saves on MY sanity :-P ) +if ! id $USER >/dev/null 2>&1; then + if [ "$USER" = "fetchmail" ]; then + # The fetchmail user might have been removed when the fetchmail-common + # package is purged. We have to re-add it here so the system-wide + # daemon will run. + + adduser --system --ingroup nogroup --home /var/lib/fetchmail \ + --shell /bin/sh --disabled-password fetchmail >/dev/null 2>&1 || true + # work around possible adduser bug, see #119366 + [ -d /var/lib/fetchmail ] || mkdir -p /var/lib/fetchmail + chmod 700 /var/lib/fetchmail + chown -h -R fetchmail:nogroup /var/lib/fetchmail + [ -x /sbin/restorecon ] && /sbin/restorecon /var/lib/fetchmail + else + log_failure_msg "$0: $USER user does not exist!" + exit 1 + fi +fi + +# add daemon option if user hasn't already specified it +if ! grep -qs '^[[:space:]]*set[[:space:]]\+daemon[[:space:]]' "$CONFFILE"; then + # Make sure user did not use -d on /etc/default/fetchmail + if ! grep -qs -e '^[[:space:]]*OPTIONS=.*-d[[:space:]]*[[:digit:]]\+' "/etc/default/fetchmail"; then + OPTIONS="$OPTIONS -d 300" + fi +fi + +# add syslog option unless user specified "set no syslog". +if ! grep -qs '^[[:space:]]*set[[:space:]]\+no[[:space:]]\+syslog' "$CONFFILE"; then + OPTIONS="$OPTIONS --syslog" +fi + +# support for ephemeral /var/run +if [ "${PIDFILE%/*}" = "/var/run/fetchmail" ] && [ ! -d ${PIDFILE%/*} ] && [ "$1" != "status" ]; then + mkdir /var/run/fetchmail + chown -h $USER:nogroup /var/run/fetchmail + chmod 700 /var/run/fetchmail + [ -x /sbin/restorecon ] && /sbin/restorecon /var/run/fetchmail +fi + +# sanity check +#if [ ! -d ${PIDFILE%/*} ]; then +# log_failure_msg "$0: directory ${PIDFILE%/*} does not exist!" +# exit 1 +#fi + +# If the user is going to use a UIDL cache, try to find a better place for the +# UIDL cache than root's homedir. Also create $UIDL if it doesn't exist, +# because the daemon won't have the permission. +# THIS IS NOT NEEDED SINCE 6.3.x +#if ! grep -qs idfile "$CONFFILE" && [ -d /var/lib/fetchmail ]; then +# OPTIONS="$OPTIONS -i $UIDL" +# touch $UIDL +# chown -h $USER $UIDL +# chmod 0600 $UIDL +#fi + +# Makes sure certain files/directories have the proper owner +if [ -f $CONFFILE -a "`stat -c '%U %a' $CONFFILE 2>/dev/null`" != "$USER 600" ]; then + chown -h $USER $CONFFILE + chmod -f 0600 $CONFFILE +fi + +case "$1" in + start) + if test -e $PIDFILE ; then + pid=`cat $PIDFILE | sed -e 's/\s.*//'|head -n1` + PIDDIR=/proc/$pid + if [ -d ${PIDDIR} -a "$(readlink -f ${PIDDIR}/exe)" = "${DAEMON}" ]; then + log_failure_msg "fetchmail already started; not starting." + exit 0 + else + log_warning_msg "Removing stale PID file $PIDFILE." + rm -f $PIDFILE + fi + fi + log_begin_msg "Starting mail retriever agent:" "fetchmail" + if start-stop-daemon -S -o -q -x $DAEMON -u $USER -c $USER -- $OPTIONS; then + log_end_msg 0 + else + log_end_msg 1 + exit 1 + fi + ;; + status) + status_of_proc $DAEMON fetchmail -p $PIDFILE + ;; + stop) + if ! test -e $PIDFILE ; then + log_failure_msg "Pidfile not found! Is fetchmail running?" + exit 0 + fi + log_begin_msg "Stopping mail retriever agent:" "fetchmail" + if start-stop-daemon -K -o -q -p $PIDFILE -x $DAEMON -u $USER; then + log_end_msg 0 + else + log_end_msg 1 + exit 1 + fi + ;; + force-reload|restart) + log_begin_msg "Restarting mail retriever agent:" "fetchmail" + if ! start-stop-daemon -K -o -q -p $PIDFILE -x $DAEMON -u $USER; then + log_end_msg 1 + exit 1 + fi + sleep 1 + if start-stop-daemon -S -q -x $DAEMON -u $USER -c $USER -- $OPTIONS; then + log_end_msg 0 + else + log_end_msg 1 + exit 1 + fi + ;; + try-restart) + if test -e $PIDFILE ; then + pid=`cat $PIDFILE | sed -e 's/\s.*//'|head -n1` + PIDDIR=/proc/$pid + if [ -d ${PIDDIR} -a "$(readlink -f ${PIDDIR}/exe)" = "${DAEMON}" ]; then + $0 restart + exit 0 + fi + fi + test -f /etc/rc`/sbin/runlevel | cut -d' ' -f2`.d/S*fetchmail* && $0 start + ;; + awaken) + log_begin_msg "Awakening mail retriever agent:" "fetchmail" + if [ -s $PIDFILE ]; then + start-stop-daemon -K -s 10 -q -p $PIDFILE -x $DAEMON + log_end_msg 0 + exit 0 + else + log_end_msg 1 + exit 1 + fi + ;; + debug-run) + echo "$0: Initiating debug run of system-wide fetchmail service..." 1>&2 + echo "$0: script will be run in debug mode, all output to forced to" 1>&2 + echo "$0: stdout. This is not enough to debug failures that only" 1>&2 + echo "$0: happen in daemon mode." 1>&2 + echo "$0: You might want to direct output to a file, and tail -f it." 1>&2 + if [ "$2" = "strace" ]; then + echo "$0: (running debug mode under strace. See strace(1) for options)" 1>&2 + echo "$0: WARNING: strace output may contain security-sensitive info, such as" 1>&2 + echo "$0: passwords; please clobber them before sending the strace file to a" 1>&2 + echo "$0: public bug tracking system, such as Debian's." 1>&2 + fi + echo "$0: Stopping the service..." 1>&2 + "$0" stop + echo "$0: exit status of service stop was: $?" + echo "$0: RUNUSER is $USER" + echo "$0: OPTIONS would be $OPTIONS" + echo "$0: Starting service in nodetach mode, hit ^C (SIGINT/intr) to finish run..." 1>&2 + if [ "$2" = "strace" ] ; then + shift + shift + [ $# -ne 0 ] && echo "$0: (strace options are: -tt $@)" 1>&2 + su -s /bin/sh -c "/usr/bin/strace -tt $* $DAEMON $OPTIONS --nosyslog --nodetach -v -v" $USER <&- 2>&1 + else + su -s /bin/sh -c "$DAEMON $OPTIONS --nosyslog --nodetach -v -v" $USER <&- 2>&1 + fi + echo "$0: End of service run. Exit status was: $?" + exit 0 + ;; + *) + log_warning_msg "Usage: /etc/init.d/fetchmail {start|stop|restart|force-reload|awaken|debug-run}" + log_warning_msg " start - starts system-wide fetchmail service" + log_warning_msg " stop - stops system-wide fetchmail service" + log_warning_msg " restart, force-reload - starts a new system-wide fetchmail service" + log_warning_msg " awaken - tell system-wide fetchmail to start a poll cycle immediately" + log_warning_msg " debug-run [strace [strace options...]] - start a debug run of the" + log_warning_msg " system-wide fetchmail service, optionally running it under strace" + exit 1 + ;; +esac + +exit 0 + +# vim:ts=4:sw=4: diff --git a/debian/fetchmail.install b/debian/fetchmail.install new file mode 100644 index 00000000..1cc4540e --- /dev/null +++ b/debian/fetchmail.install @@ -0,0 +1,30 @@ +# A single line with a single occurence of the destination directory +# would be more efficient (as debhelper would use one cp command), but +# this presentation seems more easy to maintain. +contrib/fetchmailnochda.pl usr/share/doc/fetchmail/contrib +contrib/fetchsetup usr/share/doc/fetchmail/contrib +contrib/domino usr/share/doc/fetchmail/contrib +contrib/fetchmaildistrib usr/share/doc/fetchmail/contrib +contrib/fetchmail-mode.el usr/share/doc/fetchmail/contrib +contrib/getmail usr/share/doc/fetchmail/contrib +contrib/gotmail usr/share/doc/fetchmail/contrib +contrib/gotmail.awk usr/share/doc/fetchmail/contrib +contrib/gotmail.conf usr/share/doc/fetchmail/contrib +contrib/gotmail.html.awk usr/share/doc/fetchmail/contrib +contrib/login usr/share/doc/fetchmail/contrib +contrib/logout usr/share/doc/fetchmail/contrib +contrib/maildaemon usr/share/doc/fetchmail/contrib +contrib/mailqueue.pl usr/share/doc/fetchmail/contrib +contrib/multidrop usr/share/doc/fetchmail/contrib +contrib/novell usr/share/doc/fetchmail/contrib +contrib/poptest usr/share/doc/fetchmail/contrib +contrib/preauth-harness usr/share/doc/fetchmail/contrib +contrib/README usr/share/doc/fetchmail/contrib +contrib/README.getmail usr/share/doc/fetchmail/contrib +contrib/runfetchmail usr/share/doc/fetchmail/contrib +contrib/toprocmail usr/share/doc/fetchmail/contrib +contrib/zsh-completion usr/share/doc/fetchmail/contrib +contrib/fetchmail.logrotate usr/share/doc/fetchmail/contrib +contrib/delete-later usr/share/doc/fetchmail/contrib +contrib/delete-later.README usr/share/doc/fetchmail/contrib +contrib/systemd/fetchmail.service usr/lib/systemd/user/ diff --git a/debian/fetchmail.links b/debian/fetchmail.links new file mode 100644 index 00000000..d38caed8 --- /dev/null +++ b/debian/fetchmail.links @@ -0,0 +1,3 @@ +usr/bin/fetchmail usr/bin/popclient +usr/share/man/man1/fetchmail.1 usr/share/man/man1/popclient.1 +usr/share/man/man1/fetchmail.1 usr/share/man/man1/fetchmailrc.1 diff --git a/debian/fetchmail.logcheck.ignore.server b/debian/fetchmail.logcheck.ignore.server new file mode 100644 index 00000000..3f03e7f0 --- /dev/null +++ b/debian/fetchmail.logcheck.ignore.server @@ -0,0 +1,15 @@ +fetchmail\[[0-9]+\]: +reading +fetchmail\[[0-9]+\]: +(not )?flushed +fetchmail\[[0-9]+\]: +[0-9]+ +messages? (\([0-9]+ seen\) )?for +fetchmail\[[0-9]+\]: +skipping poll +fetchmail\[[0-9]+\]: +Polling +fetchmail\[[0-9]+\]: +Queuing for +fetchmail\[[0-9]+\]: +awakened by +fetchmail\[[0-9]+\]: +awakened at +fetchmail\[[0-9]+\]: +sleeping +fetchmail\[[0-9]+\]: .* key fingerprint: +fetchmail\[[0-9]+\]: +\(.* body octets\) +fetchmail\[[0-9]+\]: +could not decode BASE64 challenge +fetchmail\[[0-9]+\]: +You have no mail\. +fetchmail\[[0-9]+\]: +Turnaround now\.\.\. +fetchmail\[[0-9]+\]: +receiving message data diff --git a/debian/fetchmail.logcheck.ignore.workstation b/debian/fetchmail.logcheck.ignore.workstation new file mode 100644 index 00000000..c0a7a6be --- /dev/null +++ b/debian/fetchmail.logcheck.ignore.workstation @@ -0,0 +1 @@ +fetchmail\[[0-9]+\]: +Server CommonName mismatch: diff --git a/debian/fetchmail.postinst b/debian/fetchmail.postinst new file mode 100644 index 00000000..c3bf1145 --- /dev/null +++ b/debian/fetchmail.postinst @@ -0,0 +1,31 @@ +#!/bin/sh +# +# Postinst script for fetchmail +# $Id: fetchmail.postinst 469 2008-05-18 12:47:05Z nion $ +# + +set -e + +# Create fetchmail user and its homedir if we may need it +if ! getent passwd fetchmail >/dev/null; then + adduser --system --ingroup nogroup --home /var/lib/fetchmail \ + --shell /bin/false --disabled-password fetchmail +fi + +# if the login shell is not /bin/false, change this, see #481727 +LOGINSH=$(getent passwd fetchmail | cut -d ':' -f 7) +if [ "x$LOGINSH" != "x/bin/false" ]; then + chsh -s /bin/false fetchmail +fi + +if ! [ -d /var/lib/fetchmail ]; then + mkdir -p /var/lib/fetchmail +fi +chmod 700 /var/lib/fetchmail +chown -h -R fetchmail:nogroup /var/lib/fetchmail + +#DEBHELPER# + +exit 0 + +# vim:ts=4:sw=4: diff --git a/debian/fetchmail.postrm b/debian/fetchmail.postrm new file mode 100644 index 00000000..64efe81c --- /dev/null +++ b/debian/fetchmail.postrm @@ -0,0 +1,32 @@ +#!/bin/sh +# +# Postrm script for fetchmail +# $Id: fetchmail.postrm 460 2008-02-04 15:20:16Z nion $ +# + +set -e + +#DEBHELPER# + +if [ "$1" = "purge" ]; then + if [ -e /usr/share/debconf/confmodule ]; then + . /usr/share/debconf/confmodule + db_purge + fi + + # Remove other cruft + rm -f /var/mail/.fetchmail-UIDL-cache >/dev/null 2>&1 || true + rm -rf /var/run/fetchmail >/dev/null 2>&1 || true + + # Remove user fetchmail + fetchmailhome=`getent passwd fetchmail | cut -d : -f 6` + rm -f "$fetchmailhome/.fetchids" >/dev/null 2>&1 || true + rm -f "$fetchmailhome/.fetchmail-UIDL-cache" >/dev/null 2>&1 || true + rm -f "$fetchmailhome/.fetchmail.pid" >/dev/null 2>&1 || true + userdel fetchmail || true + rmdir "$fetchmailhome" >/dev/null 2>&1 || true +fi + +exit 0 + +# vim:ts=4:sw=4: diff --git a/debian/fetchmail.ppp.ip-down b/debian/fetchmail.ppp.ip-down new file mode 100644 index 00000000..75d0cfbe --- /dev/null +++ b/debian/fetchmail.ppp.ip-down @@ -0,0 +1,13 @@ +#!/bin/sh +# +# Default fetchmail ip-down script (/etc/ppp/ip-down.d/fetchmail) +# +# Remove the "exit 0" line if you want only want to run fetchmail when the +# PPP link is up. +# + +exit 0 + +if [ -x /etc/init.d/fetchmail ]; then + invoke-rc.d --quiet fetchmail stop || true +fi diff --git a/debian/fetchmail.ppp.ip-up b/debian/fetchmail.ppp.ip-up new file mode 100644 index 00000000..3950a32a --- /dev/null +++ b/debian/fetchmail.ppp.ip-up @@ -0,0 +1,13 @@ +#!/bin/sh +# +# Default fetchmail ip-up script (/etc/ppp/ip-up.d/fetchmail) +# +# Change "try-restart" below to "start" +# and remove "-a ! -x /sbin/resolvconf" +# if you only want to run fetchmail when +# the PPP link is up. +# + +if [ -x /etc/init.d/fetchmail -a ! -x /sbin/resolvconf ]; then + invoke-rc.d --quiet fetchmail try-restart || true +fi diff --git a/debian/fetchmail.preinst b/debian/fetchmail.preinst new file mode 100644 index 00000000..96550390 --- /dev/null +++ b/debian/fetchmail.preinst @@ -0,0 +1,18 @@ +#!/bin/sh +# +# Preinst script for fetchmail +# $Id: fetchmail.preinst 486 2008-12-22 15:13:12Z nion $ +# + +set -e + +# Remove a possibly fucked ip-up.d, which was unfortunately not +# removed due of being a conffile. This is ugly but the only "clean" +# way I see right now. +if [ -f /etc/network/if-up.d/fetchmail ] && [ "$2" = "6.2.4-3" ]; then + rm -f /etc/network/if-up.d/fetchmail +fi + +#DEBHELPER# + +exit 0 diff --git a/debian/fetchmail.prerm b/debian/fetchmail.prerm new file mode 100644 index 00000000..ecd8db61 --- /dev/null +++ b/debian/fetchmail.prerm @@ -0,0 +1,11 @@ +#!/bin/sh + +set -e +# Stops daemon if it is running under our control +if [ -x /etc/init.d/fetchmail ]; then + invoke-rc.d --quiet fetchmail stop +fi + +#DEBHELPER# + +exit 0 diff --git a/debian/fetchmailrc.example b/debian/fetchmailrc.example new file mode 100644 index 00000000..5fd5ecce --- /dev/null +++ b/debian/fetchmailrc.example @@ -0,0 +1,33 @@ +# /etc/fetchmailrc for system-wide daemon mode +# This file must be chmod 0600, owner fetchmail + +# The default for this option is 300, which polls the server every 5 +# minutes. +# +#set daemon 300 + +# By default, the system-wide fetchmail will output logging messages to +# syslog; uncomment the line below to disable this. This might be useful +# if you are logging to another file using the 'logfile' option. +# +# set no syslog + +# Avoid loss on 4xx errors. On the other hand, 5xx errors get more +# dangerous. +# +set no bouncemail + +# The following defaults are used when connecting to any server, and can +# be overridden in the server description below. +# +# Set antispam to -1, since it is far safer to use that together with no +# bouncemail. +# +defaults: + antispam -1 + batchlimit 100 + +# Example server section. +# +#poll foo.bar.org with protocol pop3 +# user baka there is localbaka here smtphost smtp.foo.bar.org; diff --git a/debian/patches/01_fetchmailconf.patch b/debian/patches/01_fetchmailconf.patch new file mode 100755 index 00000000..24557339 --- /dev/null +++ b/debian/patches/01_fetchmailconf.patch @@ -0,0 +1,14 @@ +Description: Remove header from fetchmailconf.py since it is a library. +Author: Hector Garcia <hector@debian.org> + +Remove header from fetchmailconf.py since it is a library. +Index: fetchmail-6.3.13/fetchmailconf.py +=================================================================== +--- fetchmail-6.3.13.orig/fetchmailconf.py 2009-09-24 01:11:14.000000000 +0200 ++++ fetchmail-6.3.13/fetchmailconf.py 2010-02-01 16:33:46.000000000 +0100 +@@ -1,5 +1,3 @@ +-#!/usr/bin/env python +-# + # A GUI configurator for generating fetchmail configuration files. + # by Eric S. Raymond, <esr@snark.thyrsus.com>, + # Matthias Andree <matthias.andree@gmx.de> diff --git a/debian/patches/04_invoke-rc.d.diff b/debian/patches/04_invoke-rc.d.diff new file mode 100644 index 00000000..8fc1bcf5 --- /dev/null +++ b/debian/patches/04_invoke-rc.d.diff @@ -0,0 +1,19 @@ +Description: patch contrib files to run invoke-rc.d instead of /etc/init.d/* directly + This is required by policy 4.0.0. +Author: Nicolas Boulenguez <nicolas@debian.org> + +--- a/contrib/fetchmail.logrotate ++++ b/contrib/fetchmail.logrotate +@@ -46,11 +46,7 @@ + sharedscripts + postrotate + if [ -f /var/run/fetchmail/fetchmail.pid ]; then \ +- if [ -x /usr/sbin/invoke-rc.d ]; then \ +- invoke-rc.d fetchmail restart > /dev/null; \ +- else \ +- /etc/init.d/fetchmail restart > /dev/null; \ +- fi; \ ++ invoke-rc.d fetchmail restart > /dev/null; + fi; + endscript + } diff --git a/debian/patches/07_properly_report_size_of_mailboxes.patch b/debian/patches/07_properly_report_size_of_mailboxes.patch new file mode 100644 index 00000000..1f68bd0d --- /dev/null +++ b/debian/patches/07_properly_report_size_of_mailboxes.patch @@ -0,0 +1,142 @@ +From 87626c2707cc0d82e49e160ab3c85430ff33534f Mon Sep 17 00:00:00 2001 +From: Matthias Andree <matthias.andree@gmx.de> +Date: Sat, 24 Aug 2019 17:53:08 +0200 +Subject: [PATCH] Properly report size of mailboxes of 2 GibiB or above. + +To fix Debian Bug#873668, reported by Andreas Schmidt. +This requires C99's new long long type. +--- + NEWS | 7 +++++++ + driver.c | 7 ++++--- + etrn.c | 2 +- + fetchmail.h | 2 +- + imap.c | 2 +- + odmr.c | 2 +- + pop2.c | 2 +- + pop3.c | 4 ++-- + 8 files changed, 18 insertions(+), 10 deletions(-) + +diff --git a/driver.c b/driver.c +index d21a32ab..a5033729 100644 +--- a/driver.c ++++ b/driver.c +@@ -948,7 +948,7 @@ static int do_session( + { + /* sigsetjmp returned zero -> normal operation */ + char buf[MSGBUFSIZE+1], *realhost; +- int count, newm, bytes; ++ int count, newm; + int fetches, dispatches, transient_errors, oldphase; + struct idlist *idp; + +@@ -1322,6 +1322,7 @@ is restored.")); + + /* compute # of messages and number of new messages waiting */ + stage = STAGE_GETRANGE; ++ unsigned long long bytes; + err = (ctl->server.base_protocol->getrange)(mailserver_socket, ctl, idp->id, &count, &newm, &bytes); + if (err != 0) + goto cleanUp; +@@ -1351,10 +1352,10 @@ is restored.")); + "%d messages for %s", + count), + count, buf); +- if (bytes == -1) ++ if (bytes == (unsigned long long)-1) // mailbox size unsupported + report_complete(stdout, ".\n"); + else +- report_complete(stdout, GT_(" (%d octets).\n"), bytes); ++ report_complete(stdout, GT_(" (%llu octets).\n"), bytes); + } + else + { +diff --git a/etrn.c b/etrn.c +index f3fab0ce..12b9d3fd 100644 +--- a/etrn.c ++++ b/etrn.c +@@ -34,7 +34,7 @@ static int etrn_ok (int sock, char *argbuf) + } + + static int etrn_getrange(int sock, struct query *ctl, const char *id, +- int *countp, int *newp, int *bytes) ++ int *countp, int *newp, unsigned long long *bytes) + /* send ETRN and interpret the response */ + { + int ok, opts; +diff --git a/fetchmail.h b/fetchmail.h +index 23ba6e6e..72259e10 100644 +--- a/fetchmail.h ++++ b/fetchmail.h +@@ -226,7 +226,7 @@ struct method /* describe methods for protocol state machine */ + /* response_parsing function */ + int (*getauth)(int, struct query *, char *); + /* authorization fetcher */ +- int (*getrange)(int, struct query *, const char *, int *, int *, int *); ++ int (*getrange)(int, struct query *, const char *, int *, int *, unsigned long long *); + /* get message range to fetch */ + int (*getsizes)(int, int, int *); + /* get sizes of messages */ +diff --git a/imap.c b/imap.c +index 7b80679a..7836acd7 100644 +--- a/imap.c ++++ b/imap.c +@@ -876,7 +876,7 @@ static int imap_search(int sock, struct query *ctl, int count) + static int imap_getrange(int sock, + struct query *ctl, + const char *folder, +- int *countp, int *newp, int *bytes) ++ int *countp, int *newp, unsigned long long *bytes) + /* get range of messages to be fetched */ + { + int ok; +diff --git a/odmr.c b/odmr.c +index 85decb6d..d1c011c4 100644 +--- a/odmr.c ++++ b/odmr.c +@@ -45,7 +45,7 @@ static int odmr_ok (int sock, char *argbuf) + } + + static int odmr_getrange(int sock, struct query *ctl, const char *id, +- int *countp, int *newp, int *bytes) ++ int *countp, int *newp, unsigned long long *bytes) + /* send ODMR and then run a reverse SMTP session */ + { + int ok, opts, smtp_sock; +diff --git a/pop2.c b/pop2.c +index 7c843616..5a5a1bd1 100644 +--- a/pop2.c ++++ b/pop2.c +@@ -84,7 +84,7 @@ static int pop2_getauth(int sock, struct query *ctl, char *buf) + } + + static int pop2_getrange(int sock, struct query *ctl, const char *folder, +- int *countp, int *newp, int *bytes) ++ int *countp, int *newp, unsigned long long *bytes) + /* get range of messages to be fetched */ + { + (void)ctl; +diff --git a/pop3.c b/pop3.c +index 6efe1b7e..25efbaad 100644 +--- a/pop3.c ++++ b/pop3.c +@@ -957,7 +957,7 @@ static int pop3_slowuidl( int sock, struct query *ctl, int *countp, int *newp) + static int pop3_getrange(int sock, + struct query *ctl, + const char *folder, +- int *countp, int *newp, int *bytes) ++ int *countp, int *newp, unsigned long long *bytes) + /* get range of messages to be fetched */ + { + int ok; +@@ -980,7 +980,7 @@ static int pop3_getrange(int sock, + if (ok == 0) { + int asgn; + +- asgn = sscanf(buf,"%d %d", countp, bytes); ++ asgn = sscanf(buf,"%d %llu", countp, bytes); + if (asgn != 2) + return PS_PROTOCOL; + } else +-- +2.22.0 + diff --git a/debian/patches/08_remove_forced_OpenSSL_check.patch b/debian/patches/08_remove_forced_OpenSSL_check.patch new file mode 100644 index 00000000..12a1d6e6 --- /dev/null +++ b/debian/patches/08_remove_forced_OpenSSL_check.patch @@ -0,0 +1,26 @@ +Description: Remove forced OpenSSL version check + Not needed, linker should take care of proper library loading. +Author: Laszlo Boszormenyi (GCS) <gcs@debian.org> +Bug-Debian: https://bugs.debian.org/973472 +Forwarded: no +Last-Update: 2023-01-10 + +--- + +--- a/socket.c ++++ b/socket.c +@@ -1123,12 +1123,12 @@ int SSLOpen(int sock, char *mycert, char + } + } + #endif +- ++/* + if (ver < OPENSSL_VERSION_NUMBER) { + report(stderr, GT_("Loaded OpenSSL library %#lx older than headers %#lx, refusing to work.\n"), (long)ver, (long)(OPENSSL_VERSION_NUMBER)); + return -1; + } +- ++*/ + if (ver > OPENSSL_VERSION_NUMBER && outlevel >= O_VERBOSE) { + report(stdout, GT_("Loaded OpenSSL library %#lx newer than headers %#lx, trying to continue.\n"), (long)ver, (long)(OPENSSL_VERSION_NUMBER)); + } diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 00000000..50da97c1 --- /dev/null +++ b/debian/patches/series @@ -0,0 +1,4 @@ +01_fetchmailconf.patch +04_invoke-rc.d.diff +07_properly_report_size_of_mailboxes.patch +08_remove_forced_OpenSSL_check.patch diff --git a/debian/resolvconf b/debian/resolvconf new file mode 100644 index 00000000..a4995913 --- /dev/null +++ b/debian/resolvconf @@ -0,0 +1,5 @@ +#!/bin/sh + +if [ -x /etc/init.d/fetchmail ] && [ -n "$(pidof fetchmail)" ]; then + /usr/sbin/invoke-rc.d --quiet fetchmail awaken +fi diff --git a/debian/rules b/debian/rules new file mode 100755 index 00000000..ecb6aa67 --- /dev/null +++ b/debian/rules @@ -0,0 +1,88 @@ +#!/usr/bin/make -f +# -*- makefile -*- + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + +# +# $Id: rules 504 2010-02-02 11:40:24Z hector $ +# +# Originally by Henrique M. Holschuh <hmh@debian.org>, and based on +# previous work by Paul Haggard <phaggart@debian.org>, and in a +# debmake-created rules file. +# +# Special package build-time options: +# POP2, RPA, NTLM, SDPS, OPIE, KRB4, KRB5, GSSAPI +# NOPOP3, NOIMAP, NOETRN, NOODMR, IPV6, IPV6SEC +# +# To use them, add the ones you need to the environment variable +# DEB_FETCHMAIL_BUILD_OPTIONS before building the package. +# +# e.g. +# export DEB_FETCHMAIL_BUILD_OPTIONS="KRB4,NOIMAP,NOETRN,NOODMR" +# dpkg-buildpackage -rfakeroot -uc -us +# +# If DEB_FETCHMAIL_BUILD_OPTIONS is undefined, SSl, NTLM and SDPS will +# be enabled by default. +# +# The targets KRB4, KRB5, GSSAPI and OPIE require the proper libraries +# to be installed in the system. +# +# IPV6 and IPV6SEC support is untested, and breaks the 'interface' +# keyword (which is why they will not be enabled by default). + +# Defaults for official debian package +DEB_FETCHMAIL_BUILD_OPTIONS ?= "SSL,NTLM,SDPS,KRB5,GSSAPI" + +# Process build-time options +translate_option = $(if $(findstring $1,$(DEB_FETCHMAIL_BUILD_OPTIONS)),$2) +FETCHCONFOPT := \ + $(call translate_option,SSL, --with-ssl=/usr) \ + $(call translate_option,POP2, --enable-POP2) \ + $(call translate_option,RPA, --enable-RPA) \ + $(call translate_option,NTLM, --enable-NTLM) \ + $(call translate_option,SDPS, --enable-SDPS) \ + $(call translate_option,OPIE, --enable-opie) \ + $(call translate_option,KRB4, --with-kerberos=/usr) \ + $(call translate_option,KRB5, --with-kerberos5) \ + $(call translate_option,GSSAPI, --with-gssapi=/usr) \ + $(call translate_option,NOPOP3, --disable-POP3) \ + $(call translate_option,NOIMAP, --disable-IMAP) \ + $(call translate_option,NOETRN, --disable-ETRN) \ + $(call translate_option,NOODMR, --disable-ODMR) \ + $(call translate_option,IPV6, --enable-inet6) + +# enable hardening +DEB_BUILD_MAINT_OPTIONS := hardening=+all +DPKG_EXPORT_BUILDFLAGS := 1 +DEB_CFLAGS_MAINT_APPEND := -Wall -pipe +include /usr/share/dpkg/buildflags.mk + +override_dh_auto_configure: + dh_auto_configure -- --enable-nls \ + --disable-rpath --disable-fallback \ + $(FETCHCONFOPT) + +override_dh_auto_install: + dh_auto_install + rm -rf debian/fetchmail/usr/lib/ + rm -f debian/fetchmail/usr/bin/fetchmailconf \ + debian/fetchmail/usr/share/man/man1/fetchmailconf.1 + install -D -m 755 debian/resolvconf \ + debian/fetchmail/etc/resolvconf/update-libc.d/fetchmail + +override_dh_installinit: + dh_installinit --restart-after-upgrade + + +override_dh_installsystemduser: + dh_installsystemduser --no-enable + +override_dh_auto_test: + +%: + dh $@ + +.PHONY: override_dh_auto_configure override_dh_auto_install \ + override_dh_installinit override_dh_installsystemduser \ + override_dh_auto_test diff --git a/debian/source/format b/debian/source/format new file mode 100644 index 00000000..163aaf8d --- /dev/null +++ b/debian/source/format @@ -0,0 +1 @@ +3.0 (quilt) diff --git a/debian/source/lintian-overrides b/debian/source/lintian-overrides new file mode 100644 index 00000000..c5a12096 --- /dev/null +++ b/debian/source/lintian-overrides @@ -0,0 +1 @@ +source-is-missing [fetchmail-man.html] diff --git a/debian/tests/control b/debian/tests/control new file mode 100644 index 00000000..83ed5bd0 --- /dev/null +++ b/debian/tests/control @@ -0,0 +1,15 @@ +Test-Command: ./configure && make check +Depends: @, build-essential, gcc, libssl-dev, python3 +Restrictions: allow-stderr + +Tests: installation +Depends: @ +Restrictions: + +Tests: service +Depends: @, systemd-sysv +Restrictions: needs-root, allow-stderr + +Tests: operation +Depends: @, sudo, python3 +Restrictions: needs-root diff --git a/debian/tests/installation b/debian/tests/installation new file mode 100644 index 00000000..271fc6ca --- /dev/null +++ b/debian/tests/installation @@ -0,0 +1,23 @@ +#!/bin/sh + +############################################ +### Check main installation requirements ### +############################################ + +set -e + +# Config file +echo "Checking config file present" +test -e /etc/default/fetchmail + +# Service +echo "Checking service scripts are installed" +test -e /etc/init.d/fetchmail +test -e /etc/ppp/ip-down.d/fetchmail + +# Script +echo "Checking fetchmail is present" +test -e /usr/bin/fetchmail +fetchmail --version > /dev/null 2>&1 +c=$(fetchmail --help 2>&1 | wc -l) +test $c -gt 5 diff --git a/debian/tests/mock-pop3-server.py b/debian/tests/mock-pop3-server.py new file mode 100644 index 00000000..159069b4 --- /dev/null +++ b/debian/tests/mock-pop3-server.py @@ -0,0 +1,214 @@ +#!/usr/bin/env python3 +# -*- Mode: Python; coding: utf-8; indent-tabs-mode: nil; tab-width: 4 -*- + +# Copyright (C) 2019 Bryce W. Harrington +# +# Released under GNU GPLv2 or later, read the file 'LICENSE.GPLv2+' for +# more information. +# +# Permission is hereby granted, free of charge, to any person obtaining +# a copy of this software and associated documentation files (the +# "Software"), to deal in the Software without restriction, including +# without limitation the rights to use, copy, modify, merge, publish, +# distribute, sublicense, and/or sell copies of the Software, and to +# permit persons to whom the Software is furnished to do so, subject to +# the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +# IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +# TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +# SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +# +# Author: Bryce Harrington <bryce@canonical.com> + +import os +import sys +import socket +from tempfile import mkstemp + +DEBUGGING = True +DEFAULT_HOST = '' +DEFAULT_PORT = 11110 +NEWLINE = b"\r\n" +MESSAGE_CONTENT = b''' +From: test@example.com\r +Subject: Test message\r +\r +This is a body for testing\r +\r +''' + +def dbg(msg): + """Prints information to stdout if debugging is enabled""" + if DEBUGGING: + sys.stdout.write("{}\n".format(msg)) + +def command_user(data, msg): + return b'+OK user accepted' + +def command_pass(data, msg): + return b'+OK pass accepted' + +def command_stat(data, msg): + return b'+OK 1 %i' %(msg.size) + +def command_list(data, msg): + if data == b'LIST': + return b'+OK 1 messages (%i octets)'%(msg.size) \ + + NEWLINE \ + + b'1 %i'%(msg.size) \ + + NEWLINE \ + + b'.' + else: + cmd, num = data.split() + return b'+OK 1 (%i octects)'%(msg.size) + +def command_last(data, msg): + return b'+OK 0' + +def command_top(data, msg): + cmd, num, lines = data.split() + assert num == b'1', "unknown message number: {num}".format(num) + bottom = NEWLINE.join(msg.bottom[:int(lines)]) + text = msg.top + NEWLINE + NEWLINE + bottom + dbg(text) + return b'+OK top of message follows%s' % (NEWLINE + text + NEWLINE + b'.') + +def command_retr(data, msg): + return b'+OK %i octets'%(msg.size) \ + + NEWLINE \ + + data \ + + NEWLINE \ + + b'.' + +def command_dele(data, msg): + return b'+OK 1 %i'%(msg.size) + +def command_noop(data, msg): + return b'+OK 1 %i'%(msg.size) + +def command_quit(data, msg): + return b'+OK mock pop3 server signing off' + +COMMANDS = { + b'USER' : command_user, + b'PASS' : command_pass, + b'STAT' : command_stat, + b'LIST' : command_list, + b'LAST' : command_last, + b'TOP' : command_top, + b'RETR' : command_retr, + b'DELE' : command_dele, + b'NOOP' : command_noop, + b'QUIT' : command_quit, +} + +class Mailbox: + """Encapsulates a mailbox containing a single email message""" + def __init__(self, message_filename): + with open(message_filename, "rb") as msg: + data = msg.read() + self.data = data + self.size = len(data) + self.top, rest = data.split(NEWLINE + NEWLINE, 1) + self.bottom = rest.split(NEWLINE) + + +class Mailserver: + def __init__(self, conn, mbox): + self._conn = conn + self._mbox = mbox + self._chunk_size = 4096 + + def close(self): + dbg(" - Server exiting") + self._conn.close() + + def send(self, data): + dbg(" - Server sending") + self._conn.sendall(data + NEWLINE) + + def receive(self): + dbg(" - Server receiving") + data = [] + while True: + chunk = self._conn.recv(self._chunk_size) + if NEWLINE in chunk: + data.append(chunk[:chunk.index(NEWLINE)]) + break + data.append(chunk) + return b"".join(data) + + def process(self): + data = self.receive() + dbg(" - Received: '{}'".format(data)) + command = data.split(None, 1)[0] + if command in COMMANDS.keys(): + response = COMMANDS[command](data, self._mbox) + dbg(" - Response: {}".format(response)) + try: + self.send(response) + if command == b'QUIT': + return False + except BrokenPipeError: + dbg(" - Client terminated connection") + return False + else: + self.send(b"-ERR unrecognized command") + return True + +def serve(messages_filename, host=DEFAULT_HOST, port=DEFAULT_PORT): + dbg("Serving for {} on {}".format(host, port)) + + sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) + sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) + sock.bind((host, port)) + + mailbox = Mailbox(messages_filename) + + try: + dbg("* mock-pop3-server ready on {}:{}".format(host, port)) + while True: + sock.listen(1) + conn, address = sock.accept() + dbg("* Connection from {}".format(address)) + server = Mailserver(conn, mailbox) + server.send(b"+OK mock-pop3-server pop3 server ready") + try: + dbg("* Processing commands for connection...") + while server.process(): + dbg("* Finished command") + pass + finally: + dbg("* Closing remote connection") + server.close() + except KeyboardInterrupt: + dbg("* mock-pop3-server interrupted") + return 1 + except SystemExit: + dbg("* mock-pop3-server exiting") + return 1 + finally: + sock.shutdown(socket.SHUT_RDWR) + sock.close() + return 0 + + +if __name__ == "__main__": + fd, message_filename = mkstemp(prefix='message-', suffix='.txt') + dbg("Creating message file '{}'".format(message_filename)) + + with open(message_filename, 'wb') as f: + f.write(MESSAGE_CONTENT.lstrip()) + + try: + exit(serve(message_filename, host=DEFAULT_HOST, port=DEFAULT_PORT)) + except KeyError: + sys.stderr.write("Exiting\n") + sys.exit(1) diff --git a/debian/tests/operation b/debian/tests/operation new file mode 100644 index 00000000..c36dfb6d --- /dev/null +++ b/debian/tests/operation @@ -0,0 +1,47 @@ +#!/bin/sh + +########################### +### Test fetching email ### +########################### + +set -e + +POP3_SERVER=127.0.0.1 +POP3_PORT=11110 +USER=${USER:-user} +PASSWORD=ubuntu +WORKDIR=$(mktemp -d) +trap "rm -rf $WORKDIR" 0 INT QUIT ABRT PIPE TERM + +LOG="${WORKDIR}/fetchmail.log" +MBOX="${WORKDIR}/test-mbox-$(date +%''s_%N)" +CONFIG="${WORKDIR}/fetchmailrc" + +echo "Configuring a functional local mail system" + +python3 "$(dirname ${0})/mock-pop3-server.py" & +SERVER_PID=$! +sleep 1 + +# Configure fetchmail +cat > "${CONFIG}" <<EOF +poll ${POP3_SERVER} port ${POP3_PORT} no uidl with protocol POP3: + auth password + user '${USER}' there with password '${PASSWORD}' + is ${USER} here + sslproto '' + mda "/bin/sh -c 'cat > ${MBOX}'" +EOF +chmod 700 "${CONFIG}" +chown -R fetchmail "${WORKDIR}" + +# Run fetchmail +echo "Checking fetchmail operates" +sudo -u fetchmail /usr/bin/fetchmail -d0 -vvv -f "${CONFIG}" "${POP3_SERVER}" + +# TODO: Verify the test email was delivered to expected destination +echo "Checking test email was received" +grep "Received: from " "${MBOX}" + +kill ${SERVER_PID} +echo "OK" diff --git a/debian/tests/service b/debian/tests/service new file mode 100644 index 00000000..95f9abcd --- /dev/null +++ b/debian/tests/service @@ -0,0 +1,13 @@ +#!/bin/sh + +############################### +### Check fetchmail service ### +############################### + +set -e + +echo "Checking fetchmail service is enabled" +systemctl is-enabled fetchmail.service + +echo "Checking fetchmail service is active" +systemctl is-active fetchmail.service diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc new file mode 100644 index 00000000..ede1268c --- /dev/null +++ b/debian/upstream/signing-key.asc @@ -0,0 +1,64 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFXwq5cBEADQxc9JeK4yqt1BX5tOMfzyIfEyBWXix0xqeAA/HQ2wd31NFcGF +EbAevDsGoO7UcYQji1Gj/TggmclV37SHPDE++bU7O6Wur57FfTsVCmS6XjHj/n2q +XgxrWtU7Fv9YOBz/wNge3sGAh2xbwh5dTt+Ew6TbuMbwXNonb4WUCo6yFMrDd2vg +9RqcVSDpdLFO0JI9hNGLQDtHP2TbBfGj8V5qz9NFiGzRxmmFhMzqOSDCEs9uanr3 +TCLq7yZFTyAmXDCZuyFhxGwHDo6jB+9LbIprA/oH0uFol899hiIrZRm7kIAYsOSv +p84x0XBFvSMoDY4ZA4Ucv3xk+aDqob0V5F4+W3Vg7bdlpbAuwov944Zawbm/sBGc +tNbfNeWjc+L7F43PbghzCfk6aLH0LwH3lNiu76F57lJqfTCnkBd0V0dUZ0/AJFsk +Zu+aO/dCVkbfjotXDqsh55kBrSMsRX/rqt2d43q6o9AyWu5aMqLAG2ZN19qLu/a1 +vzbMEfRaimlFSo9LMY1jf5TcUc7mNlPDhm8c6o+Ivx/D0tSQ4V+3SqbroYgHo1A4 +Qyiau4sEP2YFtKbdRdpaN7WsdfdaZmrd9xa5lvp/gQZEdpLPzL0aBDEeUzaL/nee +/EDQUbPuSYJCmDNyqxs/Y4j0ZGQmIPT1CY34AvdjIcLuT/BG1JZaIlKQ9QARAQAB +tCVNYXR0aGlhcyBBbmRyZWUgPG1hbmRyZWVARnJlZUJTRC5vcmc+iQI9BBMBCgAn +BQJV8K2uAhsDBQkLRzUABQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEOQSsVbv +84Va0lAQAId7zuMEqUVFSnSNqME944cFgFz8PTMfe16FYSCjGJoQRL433oTAo9k0 +Lf0DDiG8egBceu+Fy8mY5RiC8DVGlbgIwLkQsstYs/HFM0MiMgumh8f1AoN+EcL9 +AdrGrJTn2/9gFA1mjH62Iifte/vrzJPUD5s5Ca5RWFoC/UcQlGsf7SbgJgujHPhs +sfhX5aOnGIi5CJ5MOBfNT04WDRkUvf0WTtCf176IXWF7ACFhwAITtyxnTGP+zuXR +j1V0bAZVkuE0+jysoaJv4xvnTBCbWufkLYeTxMrLPhW+umbi4+QNT/8LRufyvuit +7lviK79duM94vob2WxVbs0OuR9wmsLOMA7zBQpSz2ZO1ScDiqJHh+3A8cAt36egt +EGdzLJD7u4swlPjU3KXKWPr9rpPBb3fwMp6zUq2kqQzSmk7vFbGBOjcMzb5AZtzp +11K/Nto6GAa/fWFZ3gQ3JRk8LaSehMof2HxZvwC1wwXGopoZX2ZxtKTe3qR4/O1v +GsibQybsNoFeIpL/ckM2vqxkOhYdkQ0Kh//5WLAXljvgeRZvX7aaIJIXJIdziogr +bJfEUKxoo+HGStoLCvRkHb5SZYoAlEQ6PoK6868vgxMBmI3GjhbF+/zFw5xiMHU2 +kqdBR8skwjU/qU+YYEuD1iqfpautLthLToN7v5yzNMRiTFttnR8ftChNYXR0aGlh +cyBBbmRyZWUgPG1hdHRoaWFzLmFuZHJlZUBnbXguZGU+iQI9BBMBCgAnBQJV8KuX +AhsDBQkLRzUABQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEOQSsVbv84Var5oP +/1zvsa/QvnsXEvN6YgbiYfFrSKS5dSltlEF8DKDuuDwDpwWFXeHV9WTcjUkKXVVd +bE1IM30E8J4MiP5k22hBxF+XTdrDlvt0iiWvZfVyYWb/i90EGC0Wyp9A9CsYCHt5 +o0Xe8Yg2/er0u18HWi8s381lzRp+I74nWQQp729jfH2Y9E5TYwLotpeEz6J2y9pT +yujMGzo9tuOS+xd+cd9sRcp5w3seJE4Naf5HrhMR1SijoE1SmF00I2KCD/1codxP +jRLhvfZ09ZwvNZihyV9CSJp9b0HM0jl1BY3p55hd9hd0CzIAl/vkLCA0TvET3SXG +nogeMChQseIpe4cV7MiupXwBGbexWiwunu4e/tQvyGPK+dSnPlL4qTx3BN5CQFj9 +s6TBKZ94Ehycu3vDCKWd2GQ6sJMUB/3+Hb4sNdsdi9OjtWdobZ4VYe6/OJuTOZKk +xcYhKaWcpF0uZSJd01I5CP0fo67IGmO9WgfG/vyeEcajO2MzkcwHbbEBzPT/4H+L +CuKV6cAjVnq/JFuYqndgq3wezMNuhrOAYLWUXXmfuc3yqxhFQQNqzNy+znX+/D1K +Psd3p0AFSIFVWe3zsQOUi70QpJrJw3RhY1lcRoJYVZKM7LE3BjHuV8kIOCyyFZiA +YpU2vjI2c2dUFUg59m85NhTeezJYvxJ8uX8WDTXIDsd+uQINBFXwq5cBEADXJu0c +p9DvJV6m5Zu+ehmm5qjEzrIIpKuub8xWfG7GTlH2YNW0EZAxuoM8PJlaqQMUp22Q +k7qRL9Zkfq7cS1bo67PizgwAQcncGL//wI+FNv8qqGBpKNwn9MzfBlEuWrrc+j9l +4CFEnAKTqvjxsv4bOcSlthrl5wA27pKanUsHgWgucwk4lAd1Q6WTbrlxxASDBu+O +mMYrCezcIFxQGdnMm7qSUCwtyEx6E0CKXgX5HS2QKtV1/pPLSsIkiBGb2h/+av8z +Fr2zUhBVxxmqPxd7fiWauGWVUYDNI59u2X2a0iNLBiRQT+Y3/p4sEIBXv+D3aInU +WHQ0/VgDFaElc/OZj2lu/y30Ud77tIfaTSBP6LQtmcb5T3VztJ4Ot9+0Rvw5VIjA +kis+JO7KAZ6n5TIW+7vkIC+04quOMmsO5f5/1Xo0NFozLBCrn8ZN58GYR2EoBx60 +PMjDFU1MsvIK7SDhD3bf4C2FnV2H2QCp0F4TH+GhVabi7FGy50VWcqI44QMI/IH4 +p4Wqt/Fc8deVGC8YC8f6OcK6HBat9iQfSA8LlhX3RtnUbl4DBlw4C+EcfZSjz45r +4Y3ah9l07Z+lrIXwUdypqGA1hvheMoaJNbFlNRvxYHY0UYeeYa8/2thoBD8mRJsp +SuraQdX64mJpBhZAr9julJKicqyTgURKZulNSwARAQABiQIlBBgBCgAPBQJV8KuX +AhsMBQkLRzUAAAoJEOQSsVbv84VaXgsP/0BzIBYcDrh/b9rj9TuQy9TkFACo1p2X +b5IP5SYIFzLLU7/LAdTFrIgaZxf/qNYNFC6BagK3EKxoVNG0KA076l2KDd1VAkqM +TpGkDwmQBTRXtI64XDdKTaARu4vjzC+iyAwmAgYMOR39KdEohpNpvcmoxbx2MFOy +TlSSYnhvQjc/nsdPh8aHG7WJPvPCk0RFxOt0uhf5448LzI0e+Riam15JBpAb/rgk +FDrVoCbiF0VIGYUWLfqhm0f3FBRqE4PrgihQfE0FpeeJiKqVshtGy64yGoN6Xw+S +pro9qsM7zA1sGLE4iVP1UK/hNsoTkbS8y+dKTLwGDKmrvakZzf2HOI6gLhNdTjzr +Koacx53PrbbmMaemuNcta5vWYPRarlCpi1V7IyTFECxTCfubIVLJw7nvyacx+FUi +n1uaP9LAqtQHeZB0NyVRsrTKys4BvtFHDKHVj/1XBiZY5IVS85WLFKgTC1pRmftc +9jbbguuJDcSLe1k6T4UOOLZCuJqldC9AYa1qSDTLs8N8JF/FKkoEcxGO5wxjCiBj +LzI+5oACY1T93oW2m02NUt+sAVysQJcAXJvZab1AmLOYK4gQDgC1gpIJL4BPq9i4 +WMmYlaHIKGNJU8CzruOFwMfnh5I/jKA+oa/j7+dwrtfrgytRoTHaAqcXwe3VH29L +93g/7fa+B3v7 +=m6uS +-----END PGP PUBLIC KEY BLOCK----- diff --git a/debian/watch b/debian/watch new file mode 100644 index 00000000..beb35e80 --- /dev/null +++ b/debian/watch @@ -0,0 +1,6 @@ +version=4 +opts=uversionmangle=s/^RELEASE\.//;s/(\d+)[_-](\d+)[_-](\d+)/\$1.\$2.\$3/;s/(\d+)[_-](\d+)/\$1.\$2/;s/(\d)[_\.\-\+]?((rc|pre|dev|beta|alpha|b|a)[\-\.]?\d*)$/$1~$2/;s/(\d)[_\.\-\+]?RC[\-\.]?(\d*)$/$1~rc$2/,\ +dversionmangle=s/\+(debian|dfsg|ds|deb)(\.?\d+)?$//i,\ +pgpsigurlmangle=s/$/.asc/ \ +https://gitlab.com/fetchmail/fetchmail/tags \ +.*/tags/RELEASE[_-]v?(\d\S*) |