ANNOUNCE: The 6.4.16-rc1 release candidate #1 of fetchmail is available (bug fixes, documentation update, SSL info in fetchmail --version)

--===============6128964266313490662==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="6X2l3aYKIzb8/OQP"
Content-Disposition: inline


--6X2l3aYKIzb8/OQP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Greetings,

The 6.4.16-rc1 release candidate of fetchmail is now available at the usual locations,
including <https://sourceforge.net/projects/fetchmail/branch_6.4/>.

It contains a few bug fixes that were contributed via Gitlab.

The source archive is available at:
<https://sourceforge.net/projects/fetchmail/branch_6.4/fetchmail-6.4.16-rc1.tar.xz/download>
<https://sourceforge.net/projects/fetchmail/branch_6.4/fetchmail-6.4.16-rc1.tar.lz/download>

Detached GnuPG signatures for the respective tarballs are at:
<https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.16-rc1.tar.xz.asc/download>
<https://sourceforge.net/projects/fetchmail/files/branch_6.4/fetchmail-6.4.16-rc1.tar.lz.asc/download>

SHA256 hash values for the tarballs:
SHA256(fetchmail-6.4.16-rc1.tar.lz)= 48ca15ba5d87b564050b7642732ffc0b2faf82b83a9eb630032e4ae7c760c866
SHA256(fetchmail-6.4.16-rc1.tar.xz)= 2ac20bb2858b9cad575b1d4b95855d02561a57f65dbd5abf20868234977a73aa

Here are the release notes:

---------------------------------------------------------------------------------
fetchmail-6.4.16 (not yet released):

# BUG FIXES
* fetchmail's --configdump, and fetchmailconf, lacked support for the
  sslcertfile option. --configdump support added by Earl Chew,
  Gitlab issue #25, merge request !28.
* fetchmail's manual page was never updated to reflect 6.2.5's change about the
  duplicate-killer code for multidrop mode, which read
  "* Dup-killer code now keys on an MD5 hash of the raw headers."
  ...instead of just the Message-ID. [commit 9dd8400, 2003-10-10 by esr]
  The manual page was now updated accordingly and documents
  historic behaviour:
  start to 5.0.7 no duplicate suppression;
  5.0.8 to 6.2.4 duplicate suppression only by Message-ID;
  6.2.5 to 6.4.X duplicate suppression by entire raw header.
  Manpage bug found by Julian Bane debugging "duplicate message" behaviour.
* ./configure no longer runs AC_LIB_LINKFLAGS (how to link) checks
  when called --without-ssl

# FEATURE
* fetchmail --version [fetchmail -V] now queries and prints the SSL/TLS
  library's "SSL default trusted certificate" file or directory (mind the word
  "default"), where the OpenSSL-compatible TLS implementation will look for
  trusted root, meaning certification authority (CA), certificates.
  NOTE 1: watch the output carefully if the line prints the defaults
  or the configured path (without "default").
  NOTE 2: SSL_CERT_DIR and SSL_CERT_FILE are documented environment variables
  for OpenSSL 1.1.1 to override the *default* locations (those compiled into
  OpenSSL or possibly in its configuration file).
  This was added when Gene Heskett was debugging his setup and the
  information "where does OpenSSL look" was missing.
* fetchmail --version now prints version of the OpenSSL library that
  it was compiled against, and that it is using at runtime, and also
  the OPENSSL_DIR and OPENSSL_ENGINES_DIR (if available).

# KNOWN BUGS AND WORKAROUNDS
  (This section floats upwards through the NEWS file so it stays with the
  current release information)
* Fetchmail does not handle messages without Message-ID header well
  (See sourceforge.net bug #780933)
* Fetchmail currently uses 31-bit signed integers in several places
  where unsigned and/or wider types should have been used, for instance,
  for mailbox sizes, and misreports sizes of 2 GibiB and beyond.
  Fixing this requires C89 compatibility to be relinquished.
* BSMTP is mostly untested and errors can cause corrupt output.
* Fetchmail does not track pending deletes across crashes.
* The command line interface is sometimes a bit stubborn, for instance,
  fetchmail -s doesn't work with a daemon running.
* Linux systems may return duplicates of an IP address in some circumstances if
  no or no global IPv6 addresses are configured.
  (No workaround. Ubuntu Bug#582585, Novell Bug#606980.)
* Kerberos 5 may be broken, particularly on Heimdal, and provide bogus error
  messages. This will not be fixed, because the maintainer has no Kerberos 5
  server to test against. Use GSSAPI.
---------------------------------------------------------------------------------

Happy fetches,
Matthias

--6X2l3aYKIzb8/OQP
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=MVBm
-----END PGP SIGNATURE-----

--6X2l3aYKIzb8/OQP--


--===============6128964266313490662==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============6128964266313490662==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Fetchmail-announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fetchmail-announce

--===============6128964266313490662==--