fetchmail-6.4.22-20.26.1<>,hap9|;؂l`Ѕ!N1RO^a*'N~jwzkdDe!j!h[nC'Vd&x |:n!hxb. VKD=>G[, Y bA(thժ2Ί;k"p׫sM;ƆT.RK4vsd2!sr >df6”y"W#ǭ9t8?,Rjq|M|Պ5[>>Ip?`d   L48@D]~ \u0u u u u 4u 5Lu7 u9xu;;u=> %>%A%(B8B*9B*:E*=>?@FG4uHuIuX|Y\u]u^Q%bZcdefluuvpwuxüuyŐz \Cfetchmail6.4.2220.26.1Full-Featured POP and IMAP Mail Retrieval DaemonFetchmail is a robust and well-documented remote mail retrieval and forwarding utility intended to be used over on-demand TCP/IP links (such as SLIP or PPP connections). Fetchmail retrieves mail from remote mail servers and forwards it to your local machine's delivery system, so it can be read by normal mail user agents, such as mutt, elm, pine, (x)emacs/gnus, or mailx. fetchmailconf, an interactive GUI configurator suitable for end-users, is included in the fetchmailconf package.asheep704SUSE Linux Enterprise 15SUSE LLC GPL-2.0-or-laterhttps://www.suse.com/Productivity/Networking/Email/Utilitieshttps://www.fetchmail.info/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in fetchmail.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi #!/bin/bash tail -n 3 $0 | /usr/sbin/sysusers2shadow RET=$? test -f /.buildenv && exit 0 exit $RET ######## data below ######## g fetchmail - u fetchmail - "mail retrieval daemon" /var/lib/fetchmail m fetchmail fetchmail PNAME=fetchmail SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create fetchmail.conf || : if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in fetchmail.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable fetchmail.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop fetchmail.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in fetchmail.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart fetchmail.service ) || : fi fi:YQ] l%8m > I sH  l# X v 9f NL 6=   D}4dj T t   S!p7#ΌHA_ $,aTC|n!3g !eW9R2` Wye6m큤A큤A큤큤큤큤큤큤A큤Aaaaaaaaaaa?/a?/a?/]%a?a?/]\{_ua]\{aa?a( a?/a]\{]\{]\{]\{]\{]\{a]\{]%]\{]\{]\{]\{]%a]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]\{]%]\{]\{]\{]\{]\{]\{]%]\{]%aa?/]%]%]%]%]%]%]%]%]%]%]%]%]%]%]%a]\{a?/]%aaa?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@fetchmailrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootfetchmailfetchmailrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootfetchmailrootfetchmail-6.4.22-20.26.1.src.rpmconfig(fetchmail)fetchmailfetchmail(x86-64)group(fetchmail)user(fetchmail) @@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(fetchmail)coreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libgssapi_krb5.so.2()(64bit)libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.2.5)(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)logrotaterpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowsysuser-shadow6.4.22-20.26.13.0.4-14.6.0-14.0-15.2-14.14.1aaay?@ay?@a`2a@a$@a$@a@a@`.``}@`lM@`<@`<@_@_@_ܙ_R,@_H_FN_C_=@^6^@]4@\@\t@Z`@Z no vulnerability. - Fix program abort (SIGABRT) with "internal error" when invalid sslproto is given with OpenSSL 1.1.0 API compatible SSL implementations. * CHANGES: - IMAP: When fetchmail is in not-authenticated state and the server volunteers CAPABILITY information, use it and do not re-probe. (After STARTTLS, fetchmail must and will re-probe explicitly.) - For typical POP3/IMAP ports 110, 143, 993, 995, if port and --ssl option do not match, emit a warning and continue. - fetchmail.man and README.SSL were updated in line with RFC-8314/8996/8997 recommendations to prefer Implicit TLS (--ssl/ssl) and TLS v1.2 or newer, placing --sslproto tls1.2+ more prominently. The defaults shall not change between 6.4.X releases for compatibility. * Rebase patches: fetchmail-add-imap-oauthbearer-support.patch fetchmail-add-query_to64_outsize-utility-function.patch fetchmail-support-oauthbearer-xoauth2-with-pop3.patch- Security fix: [bsc#1190069, CVE-2021-39272] * Fix failure to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH. * Advisory: https://www.fetchmail.info/fetchmail-SA-2021-02.txt * Add fetchmail-CVE-2021-39272.patch- Added hardening to systemd service(s) (bsc#1181400). Modified: * fetchmail.service- Update to 6.4.21 in SLE-15-SP2: [jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059] * Remove patches fixed upstream: - fetchmail-SNI-hostname-support.patch - fetchmail-CVE-2021-36386.patch - fetchmail-PASSWORDLEN-256.patch- Update to 6.4.21: * REGRESSION FIX: The new security fix in 6.4.20 for CVE-2021-36386 caused truncation of messages logged to buffered outputs, predominantly --logfile.- Security fix: [bsc#1188875, CVE-2021-36386] * DoS or information disclosure in some configurations. * See also: https://www.fetchmail.info/fetchmail-SA-2021-01.txt * Add fetchmail-CVE-2021-36386.patch- Update to 6.4.20: [bsc#1188875, CVE-2021-36386] * CVE-2021-36386: DoS or information disclosure in some configurations. When a log message exceeds c. 2 kByte in size, for instance, with very long header contents, and depending on verbosity option, fetchmail can crash or misreport each first log message that requires a buffer reallocation. fetchmail then reallocates memory and re-runs vsnprintf() without another call to va_start(), so it reads garbage. The exact impact depends on many factors around the compiler and operating system configurations used and the implementation details of the stdarg.h interfaces of the two functions mentioned before.- Change PASSWORDLEN from 64 to 256 [bsc#1188034] * Add fetchmail-PASSWORDLEN-256.patch- Backported support for OAUTH2 authentication from Fetchmail 7.0. - add imap oauthbearer support - support oauthbearer/xoauth2 with pop3 - add passwordfile and passwordfd options - add contrib/fetchnmail-oauth2.py token acquisition utility - FAQ: list gmail options including oauthbearer and app password - give each ctl it's own copy of password - re-read passwordfile on every poll - add query_to64_outsize() utility function - Chase and integrate interface change. - oauth2.c: calculate and pass in correct buffer size to to64frombits() - Increase max password length to handle oauth tokens - Bump max. passwordlen to 10000 bytes. - Add README.OAUTH2 - Added patches: * fetchmail-add-imap-oauthbearer-support.patch * fetchmail-support-oauthbearer-xoauth2-with-pop3.patch * fetchmail-add-passwordfile-and-passwordfd-options.patch * fetchmail-add-contrib-fetchnmail-oauth2.py-token-acquisition-u.patch * fetchmail-FAQ-list-gmail-options-including-oauthbearer-and-app.patch * fetchmail-give-each-ctl-it-s-own-copy-of-password.patch * fetchmail-re-read-passwordfile-on-every-poll.patch * fetchmail-add-query_to64_outsize-utility-function.patch * fetchmail-chase-and-integrate-interface-change.patch * fetchmail-oauth2-c-calculate-and-pass-in-correct-buffer-size-to-to64frombits.patch * fetchmail-increase-max-password-length-to-handle-oauth-tokens.patch * fetchmail-bump-max-passwordlen-to-1bytes.patch * fetchmail-add-readme-oauth2-issue-27.patch- update to 6.4.19: * fetchmailconf: properly catch and report option parsing errors * LMTP: do not try to validate the last component of a UNIX-domain LMTP socket as though it were a TCP port.- update to 6.4.18: * fetchmailconf: fetchmail 6.4.16 added --sslcertfile to the configuration dump, but fetchmailconf support was incomplete in Git 7349f124 and it could not parse sslcertfile, thus the user settings editor came up empty with console errors printed. Fix configuration parser in fetchmailconf. * fetchmailconf: do not require fetchmail for -V. do not require Tk (Tkinter) for -d option. This is to fail more gracefully on incomplete installs. * TLS code: remove OPENSSL_NO_DEPRECATED macros to avoid portability issues with OpenSSL v3 - these are for development purposes, not production. * TLS futureproofing: use SSL_use_PrivateKey_file instead of SSL_use_RSAPrivateKey_file, the latter will be deprecated with OpenSSL v3, and the user's key file might be something else than RSA. * IMAP client: it used to leak memory for username and password when trying the LOGIN (password-based) authentication and encountered a timeout situation. * dist-tools/getstats.py: also counts lines in *.py files, shown above. * fetchmail.man: now mentions that you may need to add --ssl when specifying a TLS-wrapped port. * fetchmailconf: --version (-V) now prints the Python version in use.- Set the hostname for SNI when using TLS [bsc#1182807] - Add fetchmail-SNI-hostname-support.patch- update to 6.4.16: * fetchmail's --configdump, and fetchmailconf, lacked support for the sslcertfile option. * fetchmail --version [fetchmail -V] now queries and prints the SSL/TLS library's "SSL default trusted certificate" file or directory (mind the word "default"), where the OpenSSL-compatible TLS implementation will look for trusted root, meaning certification authority (CA), certificates. * fetchmail --version now prints version of the OpenSSL library that it was compiled against, and that it is using at runtime, and also the OPENSSL_DIR and OPENSSL_ENGINES_DIR (if available).- update to 6.4.15: * Fix a typo in the manual page reported by David McKelvie. * Fix cross-compilation with openssl, by Fabrice Fontaine. Merge request !23. * Fix truncation of SMTP PLAIN AUTH with ^ in credentials, by Earl Chew.- update to 6.4.14: * sr: Мирослав Николић (Miroslav Nikolić) [Serbian] * Errors about lock file (= pidfile) creation could be lost in daemon configurations (-d option, or set daemon) when using syslog. Now they are also logged to syslog. Found verifying a pidfile creation issue on 6.4.12 that was previously reported by Alex Hall of Automatic Distributors. * If the lock file cannot be removed (no write permission on directory), try to truncate it, and if that fails, report error. * If the pidfile was non-default, fetchmail -q or --quit would malfunction and claim no other fetchmail were running, because it did not read the configuration files or merge the command line options, thus it would look for the PID in the wrong file.- Don't require systemd - Use tmpfiles for all files - Use systemd macro for tmpfiles - Don't delete home directory if the user stays - Use sysusers config to create system user- update to 6.4.12: [#] REGRESSION FIX: * configure: fetchmail 6.4.9 and 6.4.10 would miss checking for TLS v1.2 and TLS v1.3 support if AC_LIB_LINKFLAGS came up with something such as /path/to/libssl.so, rather than -lssl. (For instance on FreeBSD) * configure: fetchmail 6.4.9's configure was unable to pick up OpenSSL if it wasn't announced by pkg-config, for instance, on FreeBSD- De-hardcode /usr/lib path for launch executable (bsc#1174075) - Spec file cleanups- Update fetchmail.keyring file - Use %{_prefix}/lib instead of %{_libexecdir}- update to 6.4.8: * Add a test program fm_realpath, and a t.realpath script, neither to be installed. These will test resolution of the current working directory. * TRANSLATION UPDATES * Plug memory leaks when parts of the configuration (defaults, rcfile, command line) override one another. * fetchmail terminated the placeholder command string too late and included garbage from the heap at the end of the string. Workaround: don't use place- holders %h or %p in the --plugin string. Bug added in 6.4.0 when merging Gitlab merge request !5 in order to fix an input buffer overrun. Faulty commit 418cda65f752e367fa663fd13884a45fcbc39ddd. * Fetchmail now checks for errors when trying to read the .idfile * Fetchmail's error messages that reports that the defaults entry isn't the first was made more precise. It could be misleading if there was a poll or skip statement before the defaults. * Fetchmail documentation was updated to require OpenSSL 1.1.1. OpenSSL 1.0.2 reached End Of Life status at the end of the year 2019. Fetchmail will tolerate, but warn about, 1.0.2 for now on the assumption that distributors backport security fixes as the need arises. Fetchmail will also warn if another SSL library that is API-compatible with OpenSSL lacks TLS v1.3 support. * If the trust anchor is missing, fetchmail refers the user to README.SSL. * The AC_DECLS(getenv) check was removed, its only user was broken and not accounting for that AC_DECLS always defines HAVE_DECL_... to 0 or 1, so fetchmail never declared a missing getenv() symbol (it was testing with [#]ifdef). Remove the backup declaration. getenv is mandated by SUSv2 anyways. * fetchmailconf now supports Python 3 and currently requires the "future" package, see https://pypi.org/project/future/. * fetchmailconf: The minimum supported version is now Python 2.7.13, but it is recommended to use at least 2.7.16 (due to its massive SSL updates). Older Python versions may check SSL certificates not strictly enough, which may cause fetchmail to complain later, if the certificate verify fails. * fetchmailconf now autoprobes SSL-wrapped connections (ports 993 and 995 for IMAP and POP3) as well and by preference. * fetchmailconf now defaults newly created users to "ssl" if either of the existing users sets ssl, or if the server has freshly been probed and found supporting ssl. There is a caveat: adding a user to an existing server without probing it again may skip adding ssl. (This does not prevent STARTTLS.) * Fix three bugs in fetchmail.man (one unterminated string to .IP macro, one line that ran into a .PP macro, .TH date format), and remove one .br request from inside the table, which is unsupported by FreeBSD 12's mandoc(1) formatter. * Further man page fixes and additions by Chris Mayo and Gregor Zattler. * When evaluating the need for STARTTLS in non-default configurations (SSL certificate validation turned off), fetchmail would only consider --sslproto tls1 as requiring STARTTLS, now all non-empty protocol versions do. * fetchmailconf now properly writes "no sslcertck" if sslcertck is disabled. * fetchmailconf now catches and reports OS errors (including DNS errors) when autoprobing. * fetchmailconf received a host of other bugfixes, see the Git commit log.- Fix invalid usage of libexecdir where %_tmpfilesdir was meant to be used.- pwdutils is gone long time ago- switch to python3 - don't require python*-devel- Update to 6.4.1 [bsc#1152964] [#]# REGRESSION FIXES: * The bug fix Debian Bug#941129 was incomplete and caused - a regression in the default file locations, so that fetchmail was no longer able to find its configuration files in some situations. - a regression under _FORTIFY_SOURCE where PATH_MAX > minimal _POSIX_PATH_MAX. - Update to 6.4.0 [#]# SECURITY FIXES THAT AFFECT BEHAVIOUR AND MAY REQUIRE RECONFIGURATION * Fetchmail no longer supports SSLv2. * Fetchmail no longer attempts to negotiate SSLv3 by default, even with --sslproto ssl23. Fetchmail can now use SSLv3, or TLSv1.1 or a newer TLS version, with STLS/STARTTLS (it would previously force TLSv1.0 with STARTTLS). If the OpenSSL version used at build and run-time supports these versions, --sslproto ssl3 and --sslproto ssl3+ can be used to re-enable SSLv3. Doing so is discouraged because the SSLv3 protocol is broken. While this change is supposed to be compatible with common configurations, users may have to and are advised to change all explicit --sslproto ssl2 (change to newer protocols required), --sslproto ssl3, --sslproto tls1 to - -sslproto auto, so that they can benefit from TLSv1.1 and TLSv1.2 where supported by the server. The --sslproto option now understands the values auto, ssl3+, tls1+, tls1.1, tls1.1+, tls1.2, tls1.2+, tls1.3, tls1.3+ (case insensitively), see CHANGES below for details. * Fetchmail defaults to --sslcertck behaviour. A new option --nosslcertck to override this has been added, but may be removed in future fetchmail versions in favour of another configuration option that makes the insecurity in using this option clearer. [#]# SECURITY FIXES * Fetchmail prevents buffer overruns in GSSAPI authentication with user names beyond c. 6000 characters in length. Reported by Greg Hudson. [#]# CHANGED REQUIREMENTS * fetchmail 6.4.0 is written in C99 and requires a SUSv3 (Single Unix Specification v3, a superset of POSIX.1-2001 aka. IEEE Std 1003.1-2001 with XSI extension) compliant system. For now, a C89 compiler should also work if the system is SUSv3 compliant. In particular, older fetchmail versions had workaround for several functions standardized in the Single Unix Specification v3, these have been removed. The trio/ library has been removed from the distribution. [#]# CHANGES * fetchmail 6.3.X is unsupported. * fetchmail now configures OpenSSL support by default. * fetchmail now requires OpenSSL v1.0.2 or newer. * Fetchmail now supports --sslproto auto and --sslproto tls1+ (same as ssl23). * --sslproto tls1.1+, tls1.2+, and tls1.3+ are now supported for auto-negotiation with a minimum specified TLS protocol version, and --sslproto tls1.1, --sslproto tls1.2 and --sslproto tls1.3 to force the specified TLS protocol version. Note that tls1.3 requires OpenSSL v1.1.1 or newer. * Fetchmail now detects if the server hangs up prematurely during SSL_connect() and reports this condition as such, and not just as SSL connection failure. (OpenSSL 1.0.2 reported incompatible with pop3.live.com by Jerry Seibert). * A foreground fetchmail can now accept a few more options while another copy is running in the background. * fetchmail now handles POP3 --keep UID lists more efficiently, by using Rainer Weikusat's P-Tree implementation. This reduces the complexity for handling a large UIDL from O(n^2) to O(n log n) and becomes noticably faster with thousands of kept messages. (IMAP does not currently track UIDs and is unaffected.) At the same time, the UIDL emulation code for deficient servers has been removed. It never worked really well. Servers that do not implement the optional UIDL command only work with --fetchall option set, which in itself is incompatible with the --keep option (it would cause message duplication). * fetchmail, when setting up TLS connections, now uses SSL_set_tlsext_host_name() to set up the SNI (Server Name Indication). Some servers (for instance googlemail) require SNI when using newer SSL protocols. * Fetchmail now sets the expected hostname through OpenSSL 1.0.2's new X509_VERIFY_PARAM_set1_host() function to enable OpenSSL's native certificate verification features. * fetchmail will drop the connection when fetching with IMAP and receiving an unexpected untagged "* BYE" response, to work around certain faulty servers. * The FETCHMAIL_POP3_FORCE_RETR environment variable is now documented, it forces fetchmail, when talking POP3, to always use the RETR command, even if it would otherwise use the TOP command. * Fetchmail's configure stage will try to query pkg-config or pkgconf for libssl and libcrypto, in case other system use .pc files to document specific library dependencies. * The gethostbyname() API calls and compatibility functions have been removed. * These translations are shipped but not installed by default because they have less than 500 translated messages out of 714: el fi gl pt_BR sk tr - > Greek, Finnish, Galician, Brazilian Portuguese, Slovak, Turkish. * Fetchmail now refuses delivery if the MDA option contains single-quoted expansions. [#]# FIXES * Do not translate header tags such as "Subject:". * Convert most links from berlios.de to sourceforge.net. * Report error to stderr, and exit, if --idle is combined with multiple accounts. * Point to --idle from GENERAL OPERATION to clarify --idle and multiple mailboxes do not mix. * Fix SSL-enabled build on systems that do not declare SSLv3_client_method(), or that #define OPENSSL_NO_SSL3 inside #include * Version report lists -SSLv3 on SSL-enabled no-ssl3 builds. * Fetchmail no longer adds a NUL byte to the username in GSSAPI authentication. This was reported to break Kerberos-based authentication with Microsoft Exchange 2013 * Set umask properly before writing the .fetchids file, to avoid failing the security check on the next run. * When forwarding by LMTP, also check antispam response code when collecting the responses after the CR LF . CR LF sequence at the end of the DATA phase. * fetchmail will not try other protocols after a socket error. This avoids mismatches of how different prococols see messages as "seen" and re-fetches of known mail. * fetchmail no longer reports "System error during SSL_connect(): Success." * fetchmailconf would ignore Edit or Delete actions on the first (topmost) item in a list (no matter if server list, user list, ...). * The mimedecode feature now properly detects multipart/mixed-type matches, so that quoted-printable-encoded multipart messages can get decoded. (Regression in 5.0.0 on 1999-03-27, as a side effect of a PGP-mimedecode fix attributed to Henrik Storner.) * FETCHMAILHOME can now safely be a relative path, which will be qualified through realpath(). Previously, it had to be absolute in daemon mode. [#]# KNOWN BUGS AND WORKAROUNDS (This section floats upwards through the NEWS file so it stays with the current release information) * Fetchmail does not handle messages without Message-ID header well (See sourceforge.net bug #780933) * Fetchmail currently uses 31-bit signed integers in several places where unsigned and/or wider types should have been used, for instance, for mailbox sizes, and misreports sizes of 2 GibiB and beyond. Fixing this requires C89 compatibility to be relinquished. * BSMTP is mostly untested and errors can cause corrupt output. * Sun Workshop 6 (SPARC) is known to miscompile the configuration file lexer in 64-bit mode. Either compile 32-bit code or use GCC to compile 64-bit fetchmail. * Fetchmail does not track pending deletes across crashes. * The command line interface is sometimes a bit stubborn, for instance, fetchmail -s doesn't work with a daemon running. * Linux systems may return duplicates of an IP address in some circumstances if no or no global IPv6 addresses are configured. (No workaround. Ubuntu Bug#582585, Novell Bug#606980.) * Kerberos 5 may be broken, particularly on Heimdal, and provide bogus error messages. This will not be fixed, because the maintainer has no Kerberos 5 server to test against. Use GSSAPI. - Remove patches merged upstream: * fetchmail-openssl11.patch * fetchmail-fetchmailconf-python3-1of3.patch * fetchmail-fetchmailconf-python3-2of3.patch * fetchmail-fetchmailconf-python3-3of3.patch - Rebase fetchmail-6.3.8-smtp_errors.patch- Remove comment about not available FETCHMAIL_USER configuration variable in sysconfig.fetchmail (bsc#1136538)- Use Debian 02_remove_SSLv3 change set based on beta 6.4.0 to modernize the patch fetchmail-openssl11.patch for modern TLS (auto) support- Fix fetchmailconf to compile with python{2,3} [bsc#1082694] * fetchmail-fetchmailconf-python3-1of3.patch * fetchmail-fetchmailconf-python3-2of3.patch * fetchmail-fetchmailconf-python3-3of3.patch- By default, the status messages are redirected to /var/log/fetchmail. The syslog option or no-logging are also available. (bsc#1033081)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- drop SSLv3 support to build with openssl 1.1 (bsc#1066940) * add fetchmail-openssl11.patch- Allow --syslog option in daemon mode (bsc#1033081). * By default, the status messages are redirected to the syslog.- prerequire group(daemon) to meet new tumbleweed user handling- Check for user/group existence before attempting to add them, and remove error suppression from these calls. - Ensure tmpfile creation is run- Made the helper script introduced in last change return exit status 5 on configuration errors instead of 1, which should make it a bit less confusing (bsc#979534)- Made /etc/sysconfig/fetchmail work again after a botched systemd conversion that ignored the file altogether (bsc#905673) - Removed the FETCHMAIL_USER setting in favor of editing the systemd service file (which should be copied to the respective location in /etc, and not edited in-place)- Cleanup with spec-cleaner - Remove support for <12.3 as it does not build anyway. - Fix krb5 switches - Provide proper rcbla controler for the service- build with PIE- Removed executable permission bits from fetchmail.service file. - Update the project url in the spec file after Berlios shutdown. - Remove dependency on gpg-offline as signature checking is implemented in the source validator.- fix bashism in postun script/bin/sh/bin/sh/bin/sh/bin/shsheep70 1643967464  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstucacsdadeeneoesfriditjanlplrorusqsrsvvizh6.4.22-20.26.16.4.22-20.26.16.4.22-20.26.1  !"#$fetchmailrcfetchmailfetchmailfetchmail-systemd-execfetchmail.servicefetchmail.conffetchmail.confrcfetchmailfetchmailFAQFEATURESMailbox-Names-UTF7.htmlMailbox-Names-UTF7.txtNEWSNOTESOLDNEWSREADMEREADME.NTLMREADME.OAUTH2README.SSLREADME.SSL-SERVERTODOcontrib007705.html007713.html008523.html010015.htmlPopDel.manualPopDel.pyREADMEREADME.getmailREADME.mold_removerdebian_rcdelete-laterdelete-later.READMEdominofetchmail-mode.elfetchmail-oauth2.pyfetchmail.logrotatefetchmaildistribfetchmailnochda.plfetchsetupfetchspoolgetfetchmailgetfetchmail.plgetmailgotmailgotmail.awkgotmail.confgotmail.html.awkip-uploginlogoutmaildaemonmailqueue.plmold_remover.pymultidropnovellpoptestpreauth-harnessrawlog.patchredhat_rcrunfetchmailsm-hybridstart_dynamic_ppptoprocmailzsh-completiondesign-notes.htmlesrs-design-notes.htmlfetchmail-EN-2010-03.txtfetchmail-FAQ.htmlfetchmail-FAQ.pdffetchmail-SA-2005-01.txtfetchmail-SA-2005-02.txtfetchmail-SA-2005-03.txtfetchmail-SA-2006-01.txtfetchmail-SA-2006-02.txtfetchmail-SA-2006-03.txtfetchmail-SA-2007-01.txtfetchmail-SA-2007-02.txtfetchmail-SA-2008-01.txtfetchmail-SA-2009-01.txtfetchmail-SA-2010-01.txtfetchmail-SA-2010-02.txtfetchmail-SA-2011-01.txtfetchmail-SA-2012-01.txtfetchmail-SA-2012-02.txtfetchmail-SA-2021-01.txtfetchmail-features.htmlfetchmail-man.htmltodo.htmlsysconfig.fetchmailfetchmailCOPYINGfetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.mofetchmail.1.gzfetchmailfetchmail/etc//etc/logrotate.d//usr/bin//usr/lib//usr/lib/systemd/system//usr/lib/sysusers.d//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/fetchmail//usr/share/doc/packages/fetchmail/contrib//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/fetchmail//usr/share/locale/ca/LC_MESSAGES//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/en_GB/LC_MESSAGES//usr/share/locale/eo/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/ja/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sq/LC_MESSAGES//usr/share/locale/sr/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/vi/LC_MESSAGES//usr/share/locale/zh_CN/LC_MESSAGES//usr/share/man/man1//var/lib//var/log/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22690/SUSE_SLE-15_Update/5287d60010c3f0ce3a367f271f4fc405-fetchmail.SUSE_SLE-15_Updatedrpmxz5x86_64-suse-linux         emptyASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=797bdcd9c00a83d803e371d32cc0d0bc292db2c6, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executabledirectoryUTF-8 Unicode textXML 1.0 document, UTF-8 Unicode text, with CRLF line terminatorsC source, ASCII textHTML document, ASCII textPython script, ASCII text executablea /usr/bin/expect -f script, ASCII text executablePerl script text executableLisp/Scheme program, ASCII text, with very long linesBourne-Again shell script, ASCII text executableunified diff output, ASCII textnews or mail, ASCII textXML 1.0 document, ASCII text, with very long linesXML 1.0 document, ASCII textHTML document, ASCII text, with very long linesAlgol 68 source, ASCII text (gzip compressed data, max compression, from Unix)RRRRRRR R RR RRRRRRRRRR RPPQ߀W [smtp_daemonutf-84de059e1fc5cd30fde8dc0eadc6d8dd5b694da8ba7bfb766e490b3162733dedf?p7zXZ !t/6`$]"k%n N3U@Lm6$NjHo\TH (4rbCFwHx>4ڷMߡQvo9z|_2Cy~ |/}y\)dzgdpdP߳ocfK5n:j0evw/A~$1O|ZGgi-{kKN䲂4ve|?lp*hWȫR)gro Z*Dؓ5 zpH>U9r5T:JRns=2%TӷU-(iYͣx}7QTϓsgg]qKi-Yvd i9CHcr{:鱛Jst +m9D6mT&%a!Aؒ@ـƄe_T'ǖ _.k?j7#'DTx(5Gnb{(pT"=١Wzg\ O< QX /DΛAÏ+aVZcM2\wolߩcs[͋tKԾl!MJh=]J{!->\[DGGc)s`1 nu)237qn뻵-@ՒtT= IgF)a#Ο6# ^ VX(ڪY=,j؛+Pm)aQYg\X\#Th%qS8Y@Rq3IX#IW"tX2Zq9V|%?K^)#GҘy+׮b^sA;16lMPVRcn}bd"i.&O12;ȐjbKt[||z.crS uoGy=l0Kc\ ̸ܦT=4$&t V'=zr+&mvMF-,ZR<[*1F½e7W\rsKwIe 4>f+=o2ڳߑ4}],-ϡe*)t`FfJy[ޢS-@a@ﾦyY?_nJ |:g0EV 1}n 6vn~H .~*/ VkRTK}@c%blp$wu*Iu fpT 9T"Gqk%a}rhz*(~=pr O;dkh^=s0kPTv4B-s2eV!ɊH(OO=J`.$zߜbbK 6%G!'ֵ\y4u ^]wyB&q F2`?ˍ2pDKXm=~ȕ)Y8'O1W1p%x|>!83@mC|wh|fb8*S h>}UF7|?[\wLC?M*iJ \ɜ-`ui~ .7n`&O_B\mz-4CY/{L||UطX2ڂ-izܪBgjpxr;\ Ψ uLCwe(6o52& 2 _  Vªd!E}f] v-[-\8pO5s>8a'U9/#A g]<ԛ,8 e=[qV4}x2V;q"V kS?p&Bff0' q%4 v]q-c3kUضW]S{ ;@{4*Њ`@MU"Xn=jٍm;;,0ӿc Ġc!Gᇯᖭ فPK}X /N&XQ_½Ws,Y-@'oQQe"'3jwA #X,91Nw8'BT8*k9]ʡᕝ!rtgRC r^$-ҘhZH_O/E%Wy2][&\{$Ĩڟg-Uu,rόg4'*򋡰@X$ #B2;PFU3_/ IsêlӇ@]B UQ=G͆NІ=o)gE}„&.IЋ&Zaa#,1O$4Q!!:ewaW&pd$KODpG[ +=`vHPe$'79zk"kE V|yv5[6 .*[yN=fb͹i ?r]hfHOڸ@~;.ϣ4jXb:d%XĜ0BiYso}d #6̢PUqVV^mܭ . yTi;lGl;̒4| &ϡLE1 PC&- d1a>(@wWD,ܵ^scwA#hse2A4@NxHp>U._F~߾?uQ}ӦܓOhBʋNqzSg WkǝK#z꽭;8폇Rw⽫i|XSJɮ[10{̀wq&3ՠxP}ڀlę#WQM;ox'Wg-mXf^ Uؔ5YM_cP.Ml28(2M'?fYFr٬xDX#rtz3GmM|)A'A+XCΚॽ9(bc[YL#b( .BGWu15GiC>G(k@R"!,B\W6b^gg%.r_3ܻ;s鑘 #M*{uZE.{lleÉ∆CjS77~ętRN1)CP-Pm^3[L!8=9g뇢ْ7]b15[V%%r2ľX dp)cH#Fiu[iJ/<@w\% }t3cNҹj8fF,;VmGi:Rw%Ivx4 5^?J'fqw;ƙ t8_Wb\MCv{bgx\pAYOΐv9{ķ5?HQ0rQrpw qH?#kȎT \*?4CSy ,(rvyoiA_wi -NhO]dz،f@^;O{gϭړ؍ou/1Ag5mbm/%nY=vF nյtYľ[uѭѶ4ߪd5`6 XU M5J|pYL+ou(쌲!If>8h'Ip&j}/@lo3^,Wl[B$ݜ йx.YUnGyM%u}^O4|h٭6G`>B8~ AI/H?"nwbWMG~::?#ݠlj[i%lj"!8~d.!rJΡҹLyJ;wa5j/L'_N ;,өZ[AKnҫk?9Ho+ٯ_LhVUBCɝpпړl[I|O$-jHtY Ekw qo('5?vLcUqpBS6kr 7A+g} |o4"`=D<F#<8wjus j. /qBHj+7:%x;*T_58~Xb STY) ߫zZd2UTN " Ʉ|^. kǣ[وOBGAN 6*~|[G #u֍KRP }9EMӶH}2 27ƀ8:3.3^_DsCDd\ x=fZ 1iWo3& Ϥ*f 9G/O/HiDp# V~ S|ZRzM2ӈ}W"ȹ:g !FPh(A BLU[ "POanW؎_EQ)߻BcOLm_@y ekTU}L/Ө w}Q7A{&cҨv:+NsB`Jz5DzxӖÉJ_m77ɞرd7 cxêdy&qBLaNK_cQЄy8džJ\ՔՑj!W[bs!^_ |_(;^}Mk|{/cXe*'Ig[}ޛXJP.UUx)[>+\5BXZ-YTJv{+[9$*UM(dQ-WuYWv󈣡.h *5}F@UX 0v0_ǰ y,s\d/F[Fgq(p ?W}'߀s1ȃ;Z#q*Wm9$te{'7)/Ud˾@tb)܊n&:%ER&bG>n|AIt u5zJSvq*}~ο'5\x'VsW3_)fE1BIIy+];ﶮut^?8E7.w hr}wҳ:#{4s#=&FF'gFTg@^ₛ,ܚgk  ˴_j &٥˒FdˮSK[.{\ #Rɷw8?IXCbD#?6MY*7?IcXU2PۦihmΤ?,>Wm6嶶YZMx ڊ$ ;P! _$\^GRd*1|nV9l̠bZkr[^ž&ԑvwN/ZVfea$[}iotzC-@u7:dƏnZ ;r<5yW &8T$B9-U.#"h> \2(!QR.Fm;'XI r?B9^NEGs@a7\:FS%R>% ֦ qR=`5|"]=Mqw G+LSwt5>؄d^ pBlhJV]5;4n@! hR̴4؃}o0X7oe.^'wkUz#9bfVw bA۞~t>:le&遤p; Ε:K}inWrq 9\@M=АV_#Nq[E4^h'F{vr8dt3KéSc 3* crTiXFíY/0 'M$6j -yD<7{Q|ֲʆ z ErG鋓)Qq߭DN+dܾhaK#RθJ:+6({9$}@PVa' >. ɴe尠E)L,3S^:n";Q<{^ۈtՌA|YYUF:"‘15UwJL0m.hQUeNƙ:L?<8}h>X7:ޟŪH0_[ܾ!9Lf8A|Rw=Aн7,L~KɂYni(ȗ@΢tݿLpRzxmX_ sx?Vl@nf,a:'Z~L0"l34]š#y1Q>͢]?5uv`(ؐzN &8#Ө+i;%R4~ ~eGm bL{ULznhpҿM 6wfϲ\Y+L|fzΥؿev6W,n3.)\;g[֔ `7r$BvtU |^ڣ̣ϖagm|ƿ*mo䵘 m66uq4; KկC Q ~պa]?862"5etR5eiQz}s=B#B%{WY݅NͤwNbO0gW4m{O=/WhT~wb+f|/!y]Dv^Z{Hߔibr+C,:aSMς%6y4}̶]!/&'Dpqc+&shm !T%gHIgL\UV<`elD gGowxɃELOq"Ǽ({X~›‹,a`C&Bڨdz<'8|Q /U49j1"T}9#DsЕ&䀱 >}-xkKy ;͖9D-\)Y%2RbA5*3C@G1Lh"%RDxܛ%C :ol]r WZ=s{iR)@#yc.@9Z<+?MR1*}&Nf{sOD)T tų9::VJj}l`.ˑ&i@_jku?hI;}PE-)Ofϴ+NXD: xKnȪ%0Q/l[tAYhYuVW}2vJi?v\ܚ7rl :oh˕Em;PB^_kIB/.PB +CvFPhYǑY_"P$G`_8Xά Io0%nQDG]݀&_ޠ-"˴a@yu(y 8j+7>2R6L lDĬab j?)o(r>hMbgI_o1❒|i|@gn{6ш9&9wѻG˶3P ?GR3ϷT 7}~ '`E}݃=DL+c!^u-q~0ABqAh~b_K<ד+xy9҃%a9kBQ5ğuo!JSٓA5JRTB;x& }I ᖱ}(QeLsLCHns 56azv;ֽCRn"58R<Ɯ -"$EckNDwŭwU\cm|PBPҩkI:%$J6΍%v8Q kqet~\af~.teC]?FdLxflSjT`f*puT:IvF 9._uL ʏ#B"p*e_DW~@S M%[p 8,ׯAМ~ЦkKXWe,v{XWaq}M.B \hȆ,%?-(+0*i;m%AˌJ+Wo5}RZIH5\.ؾё}}JlFb YZ