Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Get ready for 6.4.22. | Matthias Andree | 2021-09-13 | 8 | -1090/+645 |
| | |||||
* | Note OpenSSL 3.0.0 support and licensing change. | Matthias Andree | 2021-09-13 | 3 | -19/+41 |
| | | | | | While here, rearrange COPYING a little bit and add a few paragraphs. Zeilen, | ||||
* | de.po: Fix typo in German translation | Matthias Andree | 2021-09-01 | 1 | -2/+2 |
| | |||||
* | NEWS: fix spelink of Stefan Eßer's last name | Matthias Andree | 2021-09-01 | 1 | -1/+1 |
| | |||||
* | NEWS: Credit Petr Pisar for Czech translation. | Matthias Andree | 2021-09-01 | 1 | -0/+1 |
| | |||||
* | IMAP: fix error code when LOGIN fails | Matthias Andree | 2021-09-01 | 1 | -7/+1 |
| | | | | | This recently printed 'we've run out of authentication methods' instead of the actual authentication failure. | ||||
* | Update <sv> Swedish translation to fetchmail 6.4.22.rc1 | Göran Uddeborg | 2021-09-01 | 1 | -299/+531 |
| | |||||
* | Update <cs> Czech translation to fetchmail 6.4.22.rc1 | Petr Pisar | 2021-09-01 | 1 | -481/+762 |
| | |||||
* | website: announce 6.4.22.rc3 | Matthias Andree | 2021-08-30 | 1 | -4/+5 |
| | |||||
* | update SA-2021-02 | Matthias Andree | 2021-08-29 | 1 | -4/+5 |
| | |||||
* | Get ready for 6.4.22.rc3. | Matthias Andree | 2021-08-29 | 4 | -535/+303 |
| | |||||
* | NEWS: Credit RC testers. | Matthias Andree | 2021-08-29 | 1 | -0/+4 |
| | |||||
* | NEWS: credit translators. | Matthias Andree | 2021-08-29 | 1 | -1/+3 |
| | | | | | | Göran Uddeborg (Swedish) was credited in a5a961e7c45fb4d1cdc700e7dcd2ff55ab2b1b51, without explicit mention in the header. credit Jakub Bogusz (Polish) and Besnik Bleta (Albanian). | ||||
* | Update <sq> Albanian translation to fetchmail-6.4.22.rc1 | Besnik Bleta | 2021-08-29 | 1 | -314/+373 |
| | |||||
* | Update <pl> Polish translation to fetchmail 6.4.22.rc1 | Jakub Bogusz | 2021-08-29 | 1 | -311/+369 |
| | |||||
* | Fix IMAP protocol confusion on 2nd and subsequent polls. | Matthias Andree | 2021-08-29 | 1 | -1/+1 |
| | | | | | | | | This is because driver.c fails to initialize stage to STAGE_GETAUTH soon enough, and on 2nd and subsequent polls it is still STAGE_LOGOUT, and the IMAP parser does not look for the CAPABILITIES outside STAGE_GETAUTH. Reported by: Stefan Esser <se@FreeBSD.org> | ||||
* | socket.c: invalid sslproto no longer abort()s | Matthias Andree | 2021-08-28 | 2 | -3/+4 |
| | |||||
* | Convert to UTF-8. | Matthias Andree | 2021-08-28 | 2 | -39/+39 |
| | |||||
* | declare .txt to be UTF-8 | Matthias Andree | 2021-08-28 | 1 | -0/+1 |
| | | | | Reported by: Hanno Böck | ||||
* | upload .htaccess | Matthias Andree | 2021-08-28 | 1 | -1/+1 |
| | |||||
* | Update <sv> Swedish translation to fetchmail 6.4.22.rc1 | Göran Uddeborg | 2021-08-28 | 1 | -474/+765 |
| | |||||
* | Get ready for 6.4.22.rc2. | Matthias Andree | 2021-08-27 | 7 | -1256/+721 |
| | |||||
* | Credit fr/eo translators. | Matthias Andree | 2021-08-27 | 1 | -0/+4 |
| | |||||
* | Update <fr> French translation to fetchmail-6.4.22.rc1 | Frédéric Marchal | 2021-08-27 | 1 | -524/+906 |
| | |||||
* | Update <eo> Esperanto translation to fetchmail 6.4.22.rc1 | Keith Bowes | 2021-08-27 | 1 | -465/+737 |
| | |||||
* | imap.c, pop3.c: fix protocol regression of 6.4.22.rc1 | Matthias Andree | 2021-08-27 | 3 | -68/+82 |
| | | | | | | | | | | | | | | | fetchmail 6.4.22.rc1 clobbered its IMAP state too late, and lost information on the protocol version in many circumstances. Consequently, it tried to talk IMAP4 to IMAP4rev1 servers, which failed. This fix the clear_sessiondata() out to the new constructor and destructor, such that imap_getauth() only needs to call it after STARTTLS, when it must re-probe CAPABILITY anyways. This was the same bug for POP3, which however does not collect state from the greeting, so that the bug was without effect for POP3. Reported by: Corey Halpin, FreeBSD port maintainer. | ||||
* | etrn.c, odmr.c, pop2.c: declare NULL con-/destructors | Matthias Andree | 2021-08-27 | 3 | -1/+7 |
| | |||||
* | struct method: introduce con-/destructors | Matthias Andree | 2021-08-27 | 2 | -0/+13 |
| | | | | | | | These can be used before setting up or after closing down a socket for protocol-specific initialisiation or cleanup, and are required to cleanly fix up the IMAP-loses-protocol-version regression without too many temporary hacks in the code. | ||||
* | NEWS: fix typo. | Matthias Andree | 2021-08-27 | 1 | -1/+1 |
| | |||||
* | README.SSL-SERVER: require TLS 1.2/1.3 | Matthias Andree | 2021-08-27 | 1 | -0/+5 |
| | |||||
* | get ready for 6.4.22.rc1. | Matthias Andree | 2021-08-27 | 3 | -20/+32 |
| | |||||
* | Doxyfile: updates | Matthias Andree | 2021-08-27 | 1 | -53/+122 |
| | |||||
* | Add CVE ID; revise TLS docs & fetchmail-SA-2021-02 | Matthias Andree | 2021-08-27 | 4 | -87/+94 |
| | |||||
* | fetchmail.c: Fix SIGSEGV optmerge()ing "no envelope" | Matthias Andree | 2021-08-27 | 3 | -2/+7 |
| | | | | | | | | Reported by Bjørn Mork, fixes Debian Bug#992400. Crash happens inside xstrdup() on a strlen((char *)-1) where the argument is constant and the trigger is a local trusted configuration file, so not deemed a vulnerability. | ||||
* | po/de.po: Update German translation. | Matthias Andree | 2021-08-27 | 1 | -274/+333 |
| | |||||
* | Misc POP3 cleanups. | Matthias Andree | 2021-08-26 | 1 | -5/+6 |
| | |||||
* | SECURITY: imap.c, pop3.c: STARTTLS drops state | Matthias Andree | 2021-08-26 | 2 | -35/+43 |
| | | | | | We need to lose all state after STARTTLS to safeguard from attacks against the clear-text part of the session. | ||||
* | NEWS: reword 6.4.21 regression fix to include --syslog | Matthias Andree | 2021-08-26 | 1 | -1/+1 |
| | |||||
* | fetchmail.c: reword port/--ssl checks to nudge user towards --ssl | Matthias Andree | 2021-08-26 | 1 | -2/+2 |
| | |||||
* | sanity check well-known POP3/IMAP ports vs. SSL | Matthias Andree | 2021-08-26 | 2 | -0/+13 |
| | | | | | Gitlab: Closes #31. (cherry picked from commit da6eb347af326912560f56081d603a0a78c3d56d) | ||||
* | lock.c: fix unused-value warning in unlockit(). | Matthias Andree | 2021-08-26 | 1 | -2/+5 |
| | |||||
* | POP3: make CAPA parser caseblind. | Matthias Andree | 2021-08-26 | 2 | -0/+4 |
| | |||||
* | xmalloc.h: Add GCC malloc attribute to xmalloc(). | Matthias Andree | 2021-08-26 | 1 | -1/+5 |
| | |||||
* | imap.c, report.c: remove or comment dead stores. | Matthias Andree | 2021-08-26 | 2 | -3/+6 |
| | |||||
* | SECURITY: POP3: changes for --auth ssh and RPA | Matthias Andree | 2021-08-26 | 3 | -43/+69 |
| | | | | | These no longer defeat STARTTLS negotiation, and RPA is only attempted with --auth any. | ||||
* | NEWS: Deprecate RPA and other nonstandard auth' schemes. | Matthias Andree | 2021-08-26 | 1 | -0/+4 |
| | |||||
* | socket.c: plugin/plugout SIGSEGV and memleak fixes | Matthias Andree | 2021-08-26 | 2 | -12/+30 |
| | |||||
* | IMAP: record server's CAPABILITY data in pre-auth state. | Matthias Andree | 2021-08-26 | 2 | -7/+47 |
| | | | | Saves one or two (STARTTLS) application-level round-trips. | ||||
* | IMAP: report 'upgrade to TLS succeeded' before CAPA probe | Matthias Andree | 2021-08-26 | 1 | -4/+4 |
| | | | | ...after successful STARTTLS, to show the logical order of events. | ||||
* | SECURITY: IMAP: no longer permit LOGIN with LOGINDISABLED. | Matthias Andree | 2021-08-26 | 2 | -35/+43 |
| |