Hey, * Frank Küster <[email protected]> [2010-02-10 20:37]: > The latest upgrade presented this as its NEWS.Debian: > > fetchmail (6.3.13-1) unstable; urgency=low > > This includes all changes since 6.3.6 > Fix KPOP regression. > Fix manual page: --sslcheck -> --sslcertck > Make the APOP challenge parser more distrustful to prevent MiM attacks. > Add sslcommonname option as a way to work around misconfigured upstream > SSL servers. > Fixed CVE-2007-4565: Denial of service. > Fixed CVE-2008-2711: Denial of service. > When expunging, mark the right messages as seen to avoid message loss in > "keep flush" configurations. > SSL fix: close memory leak when SSL connection fails. > Make the comparison of the SSL fingerprints case insensitive, to ease its > use. > The sleeping at/awakened at messages appear in logfiles and syslog only if > verbose mode is enabled. > fetchmail only requests IPv6 addresses via name service if at least one is > configured on the local host, likewise for IPv4. > If the server name contains "yahoo.com", offers the "ID" capability, and > we're polling via IMAP, send an ID ("guid" "1") transaction first, ignoring > its result. > Fetchmail no longer drops permanently undelivered messages by default, to > match historic documentation. > There is a new "softbounce" global option that prevents the deletion of > messages that have not been forwarded. It defaults to "true" for fetchmail > 6.3.X in order to match historic documentation. > Fixed CVE-2009-2666: SSL NUL prefix impersonation attack through NULs in a > part of a X.509 certificate's CommonName and subjectAltName fields. > > -- Hector Garcia <[email protected]> Mon, 2 Feb 2010 23:24:29 +0100 > > This is not a suitable NEWS entry, neither in terms of content nor > proper form. See the explanation at
Yep good point. I'll remove it on the next upload/change it so it notes the introduction of the new softbounce option. Cheers Nico -- Nico Golde - http://www.ngolde.de - [email protected] - GPG: 0xA0A0AAAA For security reasons, all text in this mail is double-rot13 encrypted.
pgp116WXMMzJo.pgp
Description: PGP signature
