ANNOUNCE: The 7.0.0-alpha9 snapshot of fetchmail is available

--===============2185015413209241319==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="YeZgUhtNZVm3j0+7"
Content-Disposition: inline


--YeZgUhtNZVm3j0+7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Greetings,

The 7.0.0-alpha9 snapshot of fetchmail is now available at the usual locati=
ons,
including <https://sourceforge.net/projects/fetchmail/files/branch_7-alpha/>

The source archive and a detached GnuPG signature are available at:
<https://downloads.sourceforge.net/project/fetchmail/branch_7-alpha/fetchma=
il-7.0.0-alpha9.tar.xz/download>
<https://downloads.sourceforge.net/project/fetchmail/branch_7-alpha/fetchma=
il-7.0.0-alpha9.tar.xz.asc/download>

It mostly merges up the recent 6.4 and 6.5 branch changes including the=20
CVE-2021-36386 security fix, but has a few changes of its own:

* 8a485deb 2021-08-03 | Bump version to alpha9. (tag: 7.0.0-alpha9)
* f63c20f0 2021-06-27 | Add support for Microsoft Office 365 OAuth2 login [=
Marijn van Vliet]
* 71edd0ce 2021-04-29 | PWMD: rename ./configure option to --enable-libpwmd
* ede874be 2021-04-29 | build-pwmd.sh: developer test script to build=20
			PWMD-enabled fetchmail for make check
* 09efedd3 2021-04-29 | .gitignore: no longer ignore build* non-directories
* 3898bb03 2021-04-27 | pwmd: Fix building with recent GCC. [Ben Kibbey]

Here are the release notes:
---------------------------------------------------------------------------=
-----
fetchmail-7.0.0 (not yet released):

NOTE THIS IS AN ALPHA RELEASE THAT HAS NOT BEEN THOROUGHLY TESTED!
XXX and FIXME - see the big merge of 2019-08-25, and 2021-01-03

# INCOMPATIBLE CHANGES
* The SSL/TLS options were massively changed and disentangled, to be cleare=
r.
* --sslmode starttls=3Dmust is now the default as a consequence of the prev=
ious=20
  sslcertck default.
  If you need an unencrypted connection, use --sslmode none.
  If you need an SSL-wrapped connection that starts immediately on a=20
  separate port, use --sslmode wrapped.
* See the REMOVED FEATURES section below for further incompatibilities.

# MAJOR CHANGES
* The POP3 code now always uses UIDL, except if "fetchall" is in effect.
  Fixes BerliOS Bug #16172. Fixes Debian Bug#345788. The --uidl option
  is now gone.

# FEATURES ADDED
* fetchmail has initial support for OAUTH2, courtesy of Matthew M. Ogilvie.=
 =20
  This requires a helper script (in Python) that ships in the contrib/ sect=
ion.
* Fetchmail can now retrieve credentials from PWMD. This needs to be enable=
d at=20
  compile-time and requires run-time configuration. See README.PWMD for det=
ails.
  Contributed by Ben Kibbey, author of libpwmd and pwmd.
* Fetchmail can now run an external command to retrieve credentials=20
  (passwords), see the fetchmail man page for passwordeval.
* Fetchmail now supports a retrieve-error command line or rcfile option tha=
t=20
  takes exactly one argument, abort (default), continue or markseen.  This=
=20
  specifies the policy used by fetchmail to handle messages whose bodies fa=
il=20
  to be retrieved due to server errors.  Both the continue and markseen opt=
ions=20
  will skip the message with errors and allow the session to continue so th=
at=20
  subsequent messages can be retrieved.  The markseen option will also mark=
 the=20
  message with errors as seen.
  The default policy is to abort the session whenever a server error occurs=
=2E=20
  Contributed by Craig Brown.
* Fetchmailconf offers CRAM-MD5 and APOP authentication. XXX FIXME: check
* The SSL/TLS/STARTTLS operation mode is now selected through a new --sslmo=
de=20
  option, which cleans up the incomprehensible --ssl and --sslproto mess of=
=20
  fetchmail versions before v7.0.0.
* The SSL/TLS/STARTTLS protocol version can now be selected through a new=
=20
  --sslprotocolversion switch.
* The SSL/TLS cipher in used is now reported in verbose mode.
* FIXME: The SHA1 fingerprint is now printed along with the MD5 digest of t=
he=20
  server's certificate; however, this can not yet be matched - matches are=
=20
  still against MD5 only.

# REMOVED FEATURES
* IMAP2 and POP2 protocol support were removed.
* RPOP support (not actually a protocol, but a variant of POP3) was removed.
* POP3: the (--)uidl option has been removed. It is always on.
* POP3: LAST is no longer used. It was removed from POP3 in the year 1994, =
and=20
  it could cause mail loss when the connection was interrupted or if client=
s=20
  besides fetchmail polled the mailbox.
* The MX and host alias DNS lookups that fetchmail performs in multidrop mo=
de=20
  have been removed. They were based on the mistaken assumption that the=20
  IMAP/POP3 server was also the MX server, which is rarely the case.  They =
have=20
  never supported IPv6 (including IPv6-mapped IPv4) either.
  Non-DNS based alias keywords such as "aka" remain.
* Kerberos IV support was removed.
* The --ssl option is obsolescent and triggers a warning that users should =
use=20
  --sslmode wrapped instead. It is understood as an alias for --sslmode=20
  wrapped.
* The --sslproto option was removed. Two new options were added in its plac=
e,=20
  --sslmode and --sslprotocolversion.
* A lot of outdated and/or unsafe-to-use material got dropped from contrib/.

# CHANGES
* APOP is no longer a protocol, but an authentication method. In order to u=
se=20
  it, use protocol POP3 auth APOP, or on the commandline, -p pop3 --auth ap=
op.
  If no authentication method is specified, APOP is automatically tried if=
=20
  offered by the server before we resort to sending the password as clear t=
ext.

# KNOWN BUGS AND WORKAROUNDS
  (This section floats upwards through the NEWS file so it stays with the=
=20
  current release information)
* Fetchmail does not handle messages without Message-ID header well
  (See sourceforge.net bug #780933)
* Fetchmail currently uses 31-bit signed integers in several places
  where unsigned and/or wider types should have been used, for instance,
  for mailbox sizes, and misreports sizes of 2 GibiB and beyond.=20
  Fixing this requires C89 compatibility to be relinquished.
* BSMTP is mostly untested and errors can cause corrupt output.
* Sun Workshop 6 (SPARC) is known to miscompile the configuration file lexe=
r in=20
  64-bit mode.  Either compile 32-bit code or use GCC to compile 64-bit=20
  fetchmail.  Note that fetchmail doesn't take advantage of 64-bit code,=20
  so compiling 32-bit SPARC code should not cause any difficulties.
* Fetchmail does not track pending deletes across crashes.
* The command line interface is sometimes a bit stubborn, for instance,=20
  fetchmail -s doesn't work with a daemon running.
* Linux systems may return duplicates of an IP address in some circumstance=
s if=20
  no or no global IPv6 addresses are configured.
  (No workaround. Ubuntu Bug#582585, Novell Bug#606980.)
* Kerberos 5 may be broken, particularly on Heimdal, and provide bogus erro=
r=20
  messages. This will not be fixed, because the maintainer has no Kerberos =
5=20
  server to test against. Use GSSAPI.
---------------------------------------------------------------------------=
-----

--YeZgUhtNZVm3j0+7
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=LUK6
-----END PGP SIGNATURE-----

--YeZgUhtNZVm3j0+7--


--===============2185015413209241319==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============2185015413209241319==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Fetchmail-announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fetchmail-announce

--===============2185015413209241319==--