ANNOUNCE: The 7.0.0-alpha8 snapshot of fetchmail is available

Matthias Andree <[email protected]> Sat, 24 Apr 2021 15:35:27 +0200
Newsgroups gmane.mail.fetchmail.announce
Message-ID <YIQen51Q5fqPjaPj__26153.5628045507$1619347296$gmane$org@ryzen.an3e.de>
--===============5230845512020237212==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="E4RSh3yu9FoKWkP7"
Content-Disposition: inline


--E4RSh3yu9FoKWkP7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Greetings,

The 7.0.0-alpha8 release of fetchmail is now available at the usual locatio=
ns,
including <https://sourceforge.net/projects/fetchmail/files/branch_7-alpha/>

The source archive is available at:
<https://downloads.sourceforge.net/project/fetchmail/branch_7-alpha/fetchma=
il-7.0.0-alpha8.tar.xz/download>

It mostly merges up the recent 6.4 and 6.5 branch changes
but has a few changes of its own:

919fd787 2021-04-24 | Bump max. passwordlen to 10000 bytes. [Matthias Andre=
e]
6357924a 2021-04-24 | po/de.po: update [Matthias Andree]
53af1ae1 2021-04-24 | Bump version to -alpha8 [Matthias Andree]
05f66769 2021-04-24 | Fix up merge error. [Matthias Andree]
d52ba965 2021-01-31 | Add README.OAUTH2 issue #27 (sourceforge/next, origin=
/next) [William Bader]
2a0c7680 2021-01-09 | fetchmailconf: better place for PIDfile. [Matthias An=
dree]
2950d204 2021-01-09 | fetchmailconf: Expose PIDfile (lockfile). [Matthias A=
ndree]
7514a696 2021-01-05 | [conf] Print pidfile in configuration [Earl Chew]
204541b6 2021-01-03 | Add support for sslcertfile. [Matthias Andree]
81bcb126 2021-01-03 | [conf] Print sslcertfile in configuration (earlchew/f=
etchmail-issue/25) [Earl]

Here are the release notes:

fetchmail-7.0.0 (not yet released):

NOTE THIS IS AN ALPHA RELEASE THAT HAS NOT BEEN THOROUGHLY TESTED!
XXX and FIXME - see the big merge of 2019-08-25, and 2021-01-03

# INCOMPATIBLE CHANGES
* The SSL/TLS options were massively changed and disentangled, to be cleare=
r.
* --sslmode starttls=3Dmust is now the default as a consequence of the prev=
ious=20
  sslcertck default.
  If you need an unencrypted connection, use --sslmode none.
  If you need an SSL-wrapped connection that starts immediately on a=20
  separate port, use --sslmode wrapped.
* See the REMOVED FEATURES section below for further incompatibilities.

# MAJOR CHANGES
* The POP3 code now always uses UIDL, except if "fetchall" is in effect.
  Fixes BerliOS Bug #16172. Fixes Debian Bug#345788. The --uidl option
  is now gone.

# FEATURES ADDED
* fetchmail has initial support for OAUTH2, courtesy of Matthew M. Ogilvie.=
 =20
  This requires a helper script (in Python) that ships in the contrib/ sect=
ion.
* Fetchmail can now retrieve credentials from PWMD. This needs to be enable=
d at=20
  compile-time and requires run-time configuration. See README.PWMD for det=
ails.
  Contributed by Ben Kibbey, author of libpwmd and pwmd.
* Fetchmail can now run an external command to retrieve credentials=20
  (passwords), see the fetchmail man page for passwordeval.
* Fetchmail now supports a retrieve-error command line or rcfile option tha=
t=20
  takes exactly one argument, abort (default), continue or markseen.  This=
=20
  specifies the policy used by fetchmail to handle messages whose bodies fa=
il=20
  to be retrieved due to server errors.  Both the continue and markseen opt=
ions=20
  will skip the message with errors and allow the session to continue so th=
at=20
  subsequent messages can be retrieved.  The markseen option will also mark=
 the=20
  message with errors as seen.
  The default policy is to abort the session whenever a server error occurs=
=2E=20
  Contributed by Craig Brown.
* Fetchmailconf offers CRAM-MD5 and APOP authentication. XXX FIXME: check
* The SSL/TLS/STARTTLS operation mode is now selected through a new --sslmo=
de=20
  option, which cleans up the incomprehensible --ssl and --sslproto mess of=
=20
  fetchmail versions before v7.0.0.
* The SSL/TLS/STARTTLS protocol version can now be selected through a new=
=20
  --sslprotocolversion switch.
* The SSL/TLS cipher in used is now reported in verbose mode.
* FIXME: The SHA1 fingerprint is now printed along with the MD5 digest of t=
he=20
  server's certificate; however, this can not yet be matched - matches are=
=20
  still against MD5 only.

# REMOVED FEATURES
* IMAP2 and POP2 protocol support were removed.
* RPOP support (not actually a protocol, but a variant of POP3) was removed.
* POP3: the (--)uidl option has been removed. It is always on.
* POP3: LAST is no longer used. It was removed from POP3 in the year 1994, =
and=20
  it could cause mail loss when the connection was interrupted or if client=
s=20
  besides fetchmail polled the mailbox.
* The MX and host alias DNS lookups that fetchmail performs in multidrop mo=
de=20
  have been removed. They were based on the mistaken assumption that the=20
  IMAP/POP3 server was also the MX server, which is rarely the case.  They =
have=20
  never supported IPv6 (including IPv6-mapped IPv4) either.
  Non-DNS based alias keywords such as "aka" remain.
* Kerberos IV support was removed.
* The --ssl option is obsolescent and triggers a warning that users should =
use=20
  --sslmode wrapped instead. It is understood as an alias for --sslmode=20
  wrapped.
* The --sslproto option was removed. Two new options were added in its plac=
e,=20
  --sslmode and --sslprotocolversion.
* A lot of outdated and/or unsafe-to-use material got dropped from contrib/.

# CHANGES
* APOP is no longer a protocol, but an authentication method. In order to u=
se=20
  it, use protocol POP3 auth APOP, or on the commandline, -p pop3 --auth ap=
op.
  If no authentication method is specified, APOP is automatically tried if=
=20
  offered by the server before we resort to sending the password as clear t=
ext.

# KNOWN BUGS AND WORKAROUNDS
  (This section floats upwards through the NEWS file so it stays with the=
=20
  current release information)
* Fetchmail does not handle messages without Message-ID header well
  (See sourceforge.net bug #780933)
* Fetchmail currently uses 31-bit signed integers in several places
  where unsigned and/or wider types should have been used, for instance,
  for mailbox sizes, and misreports sizes of 2 GibiB and beyond.=20
  Fixing this requires C89 compatibility to be relinquished.
* BSMTP is mostly untested and errors can cause corrupt output.
* Sun Workshop 6 (SPARC) is known to miscompile the configuration file lexe=
r in=20
  64-bit mode.  Either compile 32-bit code or use GCC to compile 64-bit=20
  fetchmail.  Note that fetchmail doesn't take advantage of 64-bit code,=20
  so compiling 32-bit SPARC code should not cause any difficulties.
* Fetchmail does not track pending deletes across crashes.
* The command line interface is sometimes a bit stubborn, for instance,=20
  fetchmail -s doesn't work with a daemon running.
* Linux systems may return duplicates of an IP address in some circumstance=
s if=20
  no or no global IPv6 addresses are configured.
  (No workaround. Ubuntu Bug#582585, Novell Bug#606980.)
* Kerberos 5 may be broken, particularly on Heimdal, and provide bogus erro=
r=20
  messages. This will not be fixed, because the maintainer has no Kerberos =
5=20
  server to test against. Use GSSAPI.


--E4RSh3yu9FoKWkP7
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Qmam
-----END PGP SIGNATURE-----

--E4RSh3yu9FoKWkP7--


--===============5230845512020237212==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============5230845512020237212==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Fetchmail-announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fetchmail-announce

--===============5230845512020237212==--