ANNOUNCE: fetchmail 6.5.5 released (more C23/GCC15 fixes, more clearing of secrets in memory)

--===============2544042093127658179==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="CiOHangLBgjU2j1U"
Content-Disposition: inline


--CiOHangLBgjU2j1U
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

The 6.5.5 release of fetchmail is now available at the usual locations,
including <https://downloads.sourceforge.net/project/fetchmail/branch_6.5/>.

Note this re-enables DNS-based features on ./configure-based builds with
GCC 15 and other compilers that implement C23 by default.

The source archive is available at:
<https://downloads.sourceforge.net/project/fetchmail/branch_6.5/fetchmail-6=
=2E5.5.tar.xz/download>

The detached GnuPG signature is available at:
<https://downloads.sourceforge.net/project/fetchmail/branch_6.5/fetchmail-6=
=2E5.5.tar.xz.asc/download>

The SHA256 hashes for the tarballs are:
SHA2-256(fetchmail-6.5.5.tar.xz)=3D f989b62729c76afbcd65ec43b9c477f2d990f09=
13da141ff8166aa4e2bf56025


Here are the release notes:
---------------------------------------------------------------------------=
-----
fetchmail-6.5.5 (released 2025-09-24, 31528 LoC):

## LICENSING CHANGE OF WOLFSSL:
* Note that wolfSSL 5.8.2 switched license from GPLv2 to GPLv3, so if
  a distribution links fetchmail against wolfSSL, this implies the use
  of the "or-any-later-version" clause of the GPLv2-or-later licensed mater=
ial
  in fetchmail, and the combined work can also only ship as GPLv3.
  This may or may not apply to later versions of wolfSSL - be sure to check!
 =20
## BUGFIXES:
=3D=3D-- note that these comprise C23 compatibility fixes (GCC 15) --=3D=3D
* Support t.operation when the running user is different from the one
  mentioned in the $USER variable.  Fix courtesy of Corey Halpin.
* The kerberos*_auth() functions for v4 and v5 have prototypes now,
  so they can be compiled by the most modern C compilers.
* AC_TYPE_* type-checking macros seem unnecessary, strip them, also from
  config.h.meson which would not fill them from build.meson. We expect
  the operating system to provide us pid_t, size_t, uint32_t.
* Our res_search() autoconf check was broken on compilers adhering to newer
  standards (C23), for instance GCC 15, disabling several DNS-based features
  in autotools-based builds, but not meson-based builds.
  Strip the bogus "extern int res_search();" declaration without prototype,
  we would need to have the prototype from the system either way.

## IMPORTANT CHANGE:
* Fetchmail is now more careful to actually clear password and like buffers
  in memory, so that is less likely that other processes could access them
  should they happen to access similar memory regions after fetchmail's exi=
t.
    Fetchmail now uses memset_explicit(), explicit_bzero(), or its own
  explicit_bzero() implementation to clear memory buffers that contain
  passwords or like secrets, or their base64 equivalents, and also buffers
  that it uses to visualize such strings, instead of just using memset().
    The motivating reason is that a plain memset() that does not have
  /observable/ effects, i. e. when we do not read from the buffer or
  transfer it, can be removed by the compiler's optimizer in the so-called
  dead store elimination, voiding our attempt to clear the buffer contents
  before releasing it to the heap.
    The named alternative functions are not being optimized away.

## WORKAROUND:
* IMAP: Recognize SASL_IR advertisement of Cyrus IMAP 3.10.0...3.12.? as
  synonymous to SASL-IR per RFC4959.  Upstream bug reported at
  https://github.com/cyrusimap/cyrus-imapd/issues/5481 - and it was
  quickly fixed in all their supported branches by patch releases.

## CHANGES:
* Several documentation tweaks.
* As long as SOURCE_DATE_EPOCH is set, the source tarball build may
  be reproducible now.  Tested on Fedora 42.
* The Japanese translation [ja] has been updated by Takeshi Hamasaki.
* The Makefile should be compatible across a wider set of make implementati=
ons,
  beyond GNU make.

---------------------------------------------------------------------------=
----

--CiOHangLBgjU2j1U
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=5YPw
-----END PGP SIGNATURE-----

--CiOHangLBgjU2j1U--


--===============2544042093127658179==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============2544042093127658179==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Fetchmail-announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fetchmail-announce

--===============2544042093127658179==--