The 6.6.6 critical bug fix release of fetchmail is available (fixes IMAP confusion on unexpected EXPUNGE)

--===============0591945278383331850==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="g+XKOgn7QsUAEu8D"
Content-Disposition: inline


--g+XKOgn7QsUAEu8D
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

The 6.6.6 critical bug fix release of fetchmail is now available at the=20
usual locations, including <https://downloads.sourceforge.net/project/fetch=
mail/branch_6.6/>.

People who cannot update but use IMAP should set "keep" or use "--keep"=20
on the command line immediately to avoid accidentally deleting the wrong=20
message in case your upstream IMAP server sees multiple clients on the=20
same mailbox OR expunge automatically when a \Deleted flag is STOREd on=20
a message.  A proper fix for this would be too large and/or risky and/or
introduce breaking changes, so is unsuitable for 6.6.x.

The source archive is available at:
<https://downloads.sourceforge.net/project/fetchmail/branch_6.6/fetchmail-6=
=2E6.6.tar.xz/download>

The detached GnuPG signature is available at:
<https://downloads.sourceforge.net/project/fetchmail/branch_6.6/fetchmail-6=
=2E6.6.tar.xz.asc/download>

The SHA256 hashes for the tarballs are:
SHA2-256(fetchmail-6.6.6.tar.xz)=3D da99f8c573c4d9e63f493c7e24447126aea25b5=
3b4c076ec79266874e29b1975


Here are the release notes:
---------------------------------------------------------------------------=
-----
fetchmail-6.6.6 (released 2026-06-24, 32443 LoC):

## CRITICAL BUGFIX FOR IMAP:
* The IMAP client, which has always used message indexes for the selected
  mailbox, did not abort when receiving an EXPUNGE response - which changes
  message numbers inside the mailbox.  Unlike UIDs, the message numbers are
  not stable and fetchmail does not have internal interfaces to track which
  messages are deleted, and adding those to a 6.6.X release would be too
  risky, and switching to UID is also too big a change, so we have no
  choice but to abort the session when seeing an EXPUNGE response without
  our own EXPUNGE request, to avoid marking the wrong message as seen/delet=
ed
  or skip the wrong one, or assume the wrong message size.
  Earl Chew reported this versus Yahoo Mail via Gitlab Work Item #91, which
  automatically expunges messages that are marked with the \Deleted flag.

  This has one new message for which we do not have translations yet,
  it is urgent to get the fix in the field.

---------------------------------------------------------------------------=
----

--g+XKOgn7QsUAEu8D
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=fZGh
-----END PGP SIGNATURE-----

--g+XKOgn7QsUAEu8D--


--===============0591945278383331850==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============0591945278383331850==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Fetchmail-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fetchmail-users

--===============0591945278383331850==--