Re: New releases of courier packages.

[email protected] Thu, 27 Aug 2015 13:32:13 +0200
Newsgroups	gmane.mail.maildrop
Message-ID	<20150827113213.GF5516@g0n>
Just to not leave the Courier-Maildrop users uninformed, esp. Gentooers,
I've posted, for now, on Gentoo Forums:

use-after-free bug maildrop still in portage
https://forums.gentoo.org/viewtopic-t-1027610.html

On Thu, Aug 27, 2015 at 10:46:27AM +0200, [email protected] wrote:
> See further below.
> 
> On Mon, Apr 27, 2015 at 08:57:35PM -0400, Sam Varshavchik wrote:
> > Download: http://www.courier-mta.org/download.html
> > 
> > New releases, of courier, courier-unicode, courier-imap, sqwebmail,
> > maildrop, and cone packages.
> > 
> > The courier-unicode update is required by all other packages.
> > 
> > Changes:
> > 
> > • Compatibility with LibreSSL.
> > 
> > • A use-after-free bug in sqwebmail was fixed; occurs only in case of a
> > hardware disk failure, or running out of disk space.
> > 
> > • Added makeimapaccess script, implementing an access file for the IMAP
> > server, like makesmtpaccess implements one for SMTP.
> > 
> > • Other minor build script fixes.
> > 
> > • Renamed the header files and the library name used by the Courier unicode
> > library, to avoid conflicts with another library. Internal reorganization of
> > the git repositories: removed the clean/smudge filter from the repo that are
> > used to stamp sysconftool-processed configuration files. If anyone has a
> > copy of the repo that was checked out using the README/INSTALLME script, run
> > "git config --unset-all filter.keywords.clean" and "git config --unset-all
> > filter.keywords.smudge" on the repo, and in each project's libs
> > subdirectory. Any transient errors, after this commit is pulled, can be
> > fixed by running "autoconf" and "./config.status --recheck", in the
> > subdirectory that errored out.
> > 
> > • Handle the date "01-Jan-1970" in IMAP searches.
> > 
> 
> 
> 
> > ------------------------------------------------------------------------------
> > One dashboard for servers and applications across Physical-Virtual-Cloud 
> > Widest out-of-the-box monitoring support with 50+ applications
> > Performance metrics, stats and reports that give you Actionable Insights
> > Deep dive visibility with transaction tracing using APM Insight.
> > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
> 
> > _______________________________________________
> > Courier-maildrop mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/courier-maildrop
> 
> This is what happened this morning to me:
> 
> $  getmail --fingerprint -r config/mirorovis\@croatiafidelishr 2>&1 | tee .getmail/log/getmail_`date +%y%m%d_%H%M%S`_`hostname`.log ; 
> getmail version 4.48.0
> Copyright (C) 1998-2012 Charles Cazabon.  Licensed under the GNU GPL version 2.
> SimpleIMAPSSLRetriever:[email protected]@lin16.mojsite.com:993:
> Enter password for SimpleIMAPSSLRetriever:[email protected]@lin16.mojsite.com:993:  
> IMAP SSL connection <imaplib.IMAP4_SSL instance at 0x3a8b8a013b0> established with fingerprint c9c83d6ecf350841c16e32ca990dccc66b7beafcebe2c6dc6853a279e59c8ed3 using cipher DHE-RSA-AES256-SHA:TLSv1/SSLv3:256
>   msg 1/3 (3106 bytes) from <[email protected]> delivered to MDA_external command maildrop (), deleted
>   msg 2/3 (7124 bytes) from <[email protected]> delivered to MDA_external command maildrop (), deleted
> Delivery error (command maildrop 5600 wrote to stderr: mail: /usr/sbin/sendmail: Permission denied
> Can't send mail: sendmail process failed with error code 1)
>   msg 3/3 (14436 bytes) from <[email protected]>, delivery error (command maildrop 5600 wrote to stderr: mail: /usr/sbin/sendmail: Permission denied
> Can't send mail: sendmail process failed with error code 1)
>   3 messages (24666 bytes) retrieved, 0 skipped
> Summary:
> Retrieved 3 messages (24666 bytes) from SimpleIMAPSSLRetriever:[email protected]@lin16.mojsite.com:993
> $
> 
> I have posted it in its entirety, as there is, in this particular instance,
> litte which would be unrelated to the issue there or that wouldn't be needed
> circumstantially to consider the issue in question, which is (IIUC, but do
> correct me if I'm wrong:
> 
> maildrop being somehow talked/nagged/<other action here> into trying to send
> mail (probably, but not certainly, the one that it was being delivering).
> 
> I have noticed this issue before, occasionally.
> 
> The system that I use is: Gentoo, at testing (~amd64), so not necessarily
> stable, but it does work like stable almost completely all the time.
> 
> The getmail is:
> 
> $ getmail --version
> getmail 4.48.0
> $
> 
> and the maildrop... no --version, no -V options, so I'll give this:
> 
> 
> # equery c maildrop
> *maildrop-2.6.0 (25 Sep 2012)
> 
>   25 Sep 2012; Eray Aslan <[email protected]> +maildrop-2.6.0.ebuild:
>   Version bump
> 
>   05 Jul 2012; Jeroen Roovers <[email protected]> maildrop-2.5.5-r1.ebuild:
>   Stable for HPPA (bug #413597).
> 
>   17 Jun 2012; Raúl Porcel <[email protected]> maildrop-2.5.5-r1.ebuild:
>   alpha/ia64/s390/sh/sparc stable wrt #413597
> 
>   29 May 2012; Brent Baude <[email protected]> maildrop-2.5.5-r1.ebuild:
>   Marking maildrop-2.5.5-r1 ppc for bug 413597
>   ...
> #
> 
> which tells me I have to file a bug with Gentoo, as this issue has been fixed,
> IIUC, a few months ago, as the author informed us on this list about the
> use-after-free bug that was fixed.
> 
> http://sourceforge.net/p/courier/mailman/courier-maildrop/thread/cone.1430182655.233366.31648.1004%40monster.email-scan.com/#msg34063125
> 
> (
> I really hope, but am uncertain that this saussage of a url will be sent
> correctly, so you can search yourself, it was this message by the subject and
> author:
> 
> [maildropl] New releases of courier packages.
> From: Sam Varshavchik <mrsam@co...> - 2015-04-28 00:57:44 
> 
> where you can find:
> 
> • A use-after-free bug in sqwebmail was fixed; occurs only in case of a  
> hardware disk failure, or running out of disk space.
> 
> Pls. do see further above, where I kindly ask to be corrected if I'm wrong.
> 
> end of the citation
> )
> 
> ...Sorry, why has it taken me so long? I'll send all this te3xt as a reply to
> that email...
> 
> So, if I'm not wrong, and if other Gentoo users of Maildrop are eager for this
> issue to be fixed, they can investigate themselves and file a bug themselves,
> as I can not promise to be able to do it very soon. I might, but I might not
> do it at all. Of poor health and also busy these days I am.
> 
Regards!
-- 
Miroslav Rovis
Zagreb, Croatia
http://www.CroatiaFidelis.hr

------------------------------------------------------------------------------

_______________________________________________
Courier-maildrop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/courier-maildrop
signature.asc (application/pgp-signature, 819 B)