New releases of courier packages

This is a MIME GnuPG-signed message.  If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.
The Internet standard for MIME PGP messages, RFC 2015, was published in 1996.
To open this message correctly you will need to install E-mail or Usenet
software that supports modern Internet standards.

--===============0690176807626443148==
Content-Type: multipart/signed;
    boundary="=_monster.email-scan.com-173549-1654056463-0001";
    micalg=pgp-sha1; protocol="application/pgp-signature"

This is a MIME GnuPG-signed message.  If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.
The Internet standard for MIME PGP messages, RFC 2015, was published in 1996.
To open this message correctly you will need to install E-mail or Usenet
software that supports modern Internet standards.

--=_monster.email-scan.com-173549-1654056463-0001
Content-Type: multipart/mixed; boundary="=_monster.email-scan.com-1654056463-0000"

This is a MIME-formatted message.  If you see this text it means that your
E-mail software does not support MIME-formatted messages.

--=_monster.email-scan.com-1654056463-0000
Content-Type: text/plain; format=flowed; delsp=yes; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Download: https://www.courier-mta.org/download.html

New development builds of all packages.

Changes:

- all: add build scripts that create installable deb packages, directly from  
source .tar.bz2 files, similar to how rpm packages get built. This was  
implemented on Ubuntu 20 and may or may not work on other Debian-derived  
distributions (the most likely determining factor is going to be names of  
build requirements). The instructions are found in each package's INSTALL  
and are mostly the same for all packages.

- sqwebmail: Fix minor use after free bugs: when showing links to decoded  
PGP attachments, and if the calendar module is enabled, and the calendaring  
server runs out of disk space; when updating the index file. Freed memory  
was read before any additional allocations took place, this reduces  
potential exposure. A diff patch is attached for earlier versions, if an  
immediate update is not possible (this patch should apply to the libs  
subdirectory of courier and sqwebmail packages).

- all: updates for gcc 12, autotools, and OpenSSL 3.0.

- sqwebmail: remove duplicate manpages from standalone sqwebmail install.

- cone: fixes an incompatibility with OpenSSL 3.0

- sysconftool: add sysconftoolize man page, clean up the hierarchy,  
eliminating the docbook symlink.

- courier-imap: fix csh profile script's adjustment of env variables. Fix  
RPM packages' installation script to automatically create temporary self- 
signed certs.

- courier-authlib: remove obsolete configure script code for migrating from  
pre-courier-authlib versions of courier packages. Remove obsolete userdb- 
test-md5 script.

- courier: remove obsolete initialization of /etc/courier/userdb*, this was  
moved to courier-authlib. Replace the webadmin suid binary with a socket- 
based daemon, like sqwebmail.

- courier-analog: add --journal option to read logs from the system journal.

- courier, courier-imap's configure script will run correctly as root.

- courier: Removed fixed uid and gid values that get determined at compile  
time and baked into Courier. courier/mail's uid and gid gets looked up at  
runtime, with minimal cost.

- courier: Fix obscure SASL authentication breakage.

- courier, courier-imap: Additional internal automated tests.


--=_monster.email-scan.com-1654056463-0000
Content-Disposition: attachment;
  FILENAME="patch.txt"
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit

diff --git a/pcp/pcpdir.c b/pcp/pcpdir.c
index ba8aad73..aa3298fc 100644
--- a/pcp/pcpdir.c
+++ b/pcp/pcpdir.c
@@ -403,9 +403,9 @@ static char *acquire_dotlock(struct PCPdir *pd)
 
 	if (!tmpname)
 	{
-		free(n);
 		fprintf(stderr, "ALERT: Failed to create dotlock: %s - %s\n",
 			n, strerror(errno));
+		free(n);
 		return (NULL);
 	}
 	strcat(strcat(strcat(strcpy(tmpname, pd->dirname), "/."),
@@ -416,9 +416,9 @@ static char *acquire_dotlock(struct PCPdir *pd)
 	if (!fp)
 	{
 		free(tmpname);
-		free(n);
 		fprintf(stderr, "ALERT: Failed to create dotlock: %s - %s\n",
 			n, strerror(errno));
+		free(n);
 		return (NULL);
 	}
 
@@ -428,9 +428,9 @@ static char *acquire_dotlock(struct PCPdir *pd)
 		fclose(fp);
 		unlink(tmpname);
 		free(tmpname);
-		free(n);
 		fprintf(stderr, "ALERT: Failed to create dotlock: %s - %s\n",
 			n, strerror(errno));
+		free(n);
 		return (NULL);
 	}
 
@@ -438,9 +438,9 @@ static char *acquire_dotlock(struct PCPdir *pd)
 	{
 		unlink(tmpname);
 		free(tmpname);
-		free(n);
 		fprintf(stderr, "ALERT: Failed to create dotlock: %s - %s\n",
 			n, strerror(errno));
+		free(n);
 		return (NULL);
 	}
 
diff --git a/rfc1035/testlookup.c b/rfc1035/testlookup.c
index 869e8066..29faafcd 100644
--- a/rfc1035/testlookup.c
+++ b/rfc1035/testlookup.c
@@ -332,7 +332,7 @@ char	ptrbuf[RFC1035_MAXNAMESIZE+1];
 		replyp=rfc1035_resolve(&res, RFC1035_OPCODE_QUERY,
 				       q_name, q_type[0], q_class);
 	}
-	free(q_type);
+
 	if (!replyp)
 	{
 		perror(argv[0]);
@@ -358,5 +358,6 @@ char	ptrbuf[RFC1035_MAXNAMESIZE+1];
 	}
 	rfc1035_replyfree(replyp);
 	rfc1035_destroy_resolv(&res);
+	free(q_type);
 	return (0);
 }
diff --git a/sqwebmail/maildir.c b/sqwebmail/maildir.c
index fd121824..f22062e3 100644
--- a/sqwebmail/maildir.c
+++ b/sqwebmail/maildir.c
@@ -927,6 +927,7 @@ static int do_msgmove(const char *from,
 			{
 				free(destdir);
 				enomem();
+				exit(0); /* gcc warning fix */
 			}
 			strcat(strcpy(p, destdir), "/shared");
 			free(destdir);
@@ -3046,23 +3047,24 @@ static void maildir_save_start(const char *folder,
 	save_time=t;
 #if 1
 	{
-	  int f = -1;
-	  char *tmpfname = alloc_filename(maildir,
-					   "", MAILDIRCURCACHE ".nfshack");
-	  if (tmpfname) {
-	    f = open(tmpfname, O_CREAT|O_WRONLY, 0600);
-	    free(tmpfname);
-	  }
-	  if (f != -1) {
-	    struct stat s;
-	    if (write(f, ".", 1) != 1)
-		    ; /* ignore */
-	    fsync(f);
-	    if (fstat(f, &s) == 0)
-	      save_time = s.st_mtime;
-	    close(f);
-	    unlink(tmpfname);
-	  }
+		int f = -1;
+		char *tmpfname = alloc_filename(maildir,
+						"", MAILDIRCURCACHE ".nfshack");
+		if (tmpfname) {
+			f = open(tmpfname, O_CREAT|O_WRONLY, 0600);
+
+			if (f != -1) {
+				struct stat s;
+				if (write(f, ".", 1) != 1)
+					; /* ignore */
+				fsync(f);
+				if (fstat(f, &s) == 0)
+					save_time = s.st_mtime;
+				close(f);
+				unlink(tmpfname);
+			}
+			free(tmpfname);
+		}
 	}
 #endif
 
diff --git a/sqwebmail/msg2html.c b/sqwebmail/msg2html.c
index 74ecfb69..a3bb4daa 100644
--- a/sqwebmail/msg2html.c
+++ b/sqwebmail/msg2html.c
@@ -1066,12 +1066,12 @@ static char *convertcid(const char *cidurl, void *voidp)
 	else
 		p=(*cid_info->info->get_url_to_mime_part)(mimeid,
 							  cid_info->info);
-	free(mimeid);
-
 	if (*mimegpgfilename && rfc->parent &&
 	    libmail_gpgmime_is_decoded(rfc->parent, &dummy))
 		add_decoded_link(rfc->parent, mimeid, dummy);
 
+	free(mimeid);
+
 	return p;
 }
 

--=_monster.email-scan.com-1654056463-0000--

--=_monster.email-scan.com-173549-1654056463-0001
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEMWrVnbBKLOeG9ifkazpiviedvyUFAmKW5g8ACgkQazpivied
vyXC1g/+NSNIUoOWbCJFSBaEB+z8BSkZgSIn+5m8rOniVKHqaOAA6gINL2Wln/3P
t6puFm5HXAejKd4bXe/t64/NhFvAbp3seGWN0NcRDgV5hg865WeR6zYGlKQforTV
Y4ILyfdimNXboYLkhiLZcwc33IQTmQFRTuecaOdPCfFkKu58h3sIssZRqaAimT1a
z+68OyCXkCBbsLUQyrPrSrw4hdJr9V5kRuuwdqDKFilyPy2/HOlaJFsKznKtpe+H
Kq7eF/sWC3Yjyf5CGdjcL96LHatMR14CLHqblz4486JxpS9ToEyFj9GrdrykEQ01
8jaOg7lYA9YLV89WJm0DE0ZowYwcEaLc+vQgZhfWxClMq7f8xJuDX4nM0SQ0bpb/
8h1Zvvj8ewkdF28sHd3aK/laOBIhCzqsjR7mQWyFNkevVsUXtQ693pYksciyWS9m
L3n7UkTDk4al2BGCzHf7lsGa9oRzRxUmxpjEe3VfByfjzjsOe1ESF3Z7U7B4qm9z
Mq12y3an0E8I9GSEI1SK9O+9Do/8ElSCv7rzxvvvNxwVRBOk7dMO0sUea2DKvRA1
aaxId2sH1i9i07owkfmHma5yYgdzcTQmlmzCAjhYa3dM4Xd696qk2lSBD/q5Ovy/
xL+wD/o9xc+PSBLmZR58sqSbiPh0Q8aLQI4dCMpspec/i50gyyQ=
=XGUv
-----END PGP SIGNATURE-----

--=_monster.email-scan.com-173549-1654056463-0001--


--===============0690176807626443148==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============0690176807626443148==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Courier-cone mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-cone

--===============0690176807626443148==--