Your message dated Sun, 04 Apr 2010 07:57:43 +0000
with message-id <[email protected]>
and subject line Bug#569207: fixed in fetchmail 6.3.15-1
has caused the Debian Bug report #569207,
regarding fetchmail: NEWS.Debian is not a changelog
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
569207: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569207
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: fetchmail
Version: 6.3.13-2
Severity: normal
The latest upgrade presented this as its NEWS.Debian:
fetchmail (6.3.13-1) unstable; urgency=low
This includes all changes since 6.3.6
Fix KPOP regression.
Fix manual page: --sslcheck -> --sslcertck
Make the APOP challenge parser more distrustful to prevent MiM attacks.
Add sslcommonname option as a way to work around misconfigured upstream SSL
servers.
Fixed CVE-2007-4565: Denial of service.
Fixed CVE-2008-2711: Denial of service.
When expunging, mark the right messages as seen to avoid message loss in
"keep flush" configurations.
SSL fix: close memory leak when SSL connection fails.
Make the comparison of the SSL fingerprints case insensitive, to ease its
use.
The sleeping at/awakened at messages appear in logfiles and syslog only if
verbose mode is enabled.
fetchmail only requests IPv6 addresses via name service if at least one is
configured on the local host, likewise for IPv4.
If the server name contains "yahoo.com", offers the "ID" capability, and
we're polling via IMAP, send an ID ("guid" "1") transaction first, ignoring its
result.
Fetchmail no longer drops permanently undelivered messages by default, to
match historic documentation.
There is a new "softbounce" global option that prevents the deletion of
messages that have not been forwarded. It defaults to "true" for fetchmail
6.3.X in order to match historic documentation.
Fixed CVE-2009-2666: SSL NUL prefix impersonation attack through NULs in a
part of a X.509 certificate's CommonName and subjectAltName fields.
-- Hector Garcia <[email protected]> Mon, 2 Feb 2010 23:24:29 +0100
This is not a suitable NEWS entry, neither in terms of content nor
proper form. See the explanation at
file:///usr/share/doc/developers-reference/best-pkging-practices.html#bpp-news-debian
Thanks in advance, Frank
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-trunk-686 (SMP w/1 CPU core)
Locale: lang=de...@euro, lc_ctype=de...@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/dash
Versions of packages fetchmail depends on:
ii adduser 3.112 add and remove users and groups
ii debianutils 3.2.2 Miscellaneous utilities specific t
ii libc6 2.10.2-2 GNU C Library: Shared libraries
ii libcomerr2 1.41.9-1 common error description library
ii libgssapi-krb5-2 1.8+dfsg~alpha1-5 MIT Kerberos runtime libraries - k
ii libk5crypto3 1.8+dfsg~alpha1-5 MIT Kerberos runtime libraries - C
ii libkrb5-3 1.8+dfsg~alpha1-5 MIT Kerberos runtime libraries
ii libssl0.9.8 0.9.8k-8 SSL shared libraries
ii lsb-base 3.2-23 Linux Standard Base 3.2 init scrip
Versions of packages fetchmail recommends:
ii ca-certificates 20090814 Common CA certificates
Versions of packages fetchmail suggests:
ii exim4 4.71-3 metapackage to ease Exim MTA (v4)
ii exim4-daemon-light [mail-tran 4.71-3 lightweight Exim MTA (v4) daemon
ii fetchmailconf 6.3.13-2 fetchmail configurator
pn resolvconf <none> (no description available)
-- no debconf information
--
Dr. Frank Küster
Debian Developer (TeXLive)
VCD Aschaffenburg-Miltenberg, ADFC Miltenberg
B90/Grüne KV Miltenberg
--- End Message ---
--- Begin Message ---
Source: fetchmail
Source-Version: 6.3.15-1
We believe that the bug you reported is fixed in the latest version of
fetchmail, which is due to be installed in the Debian FTP archive:
fetchmail_6.3.15-1.debian.tar.gz
to main/f/fetchmail/fetchmail_6.3.15-1.debian.tar.gz
fetchmail_6.3.15-1.dsc
to main/f/fetchmail/fetchmail_6.3.15-1.dsc
fetchmail_6.3.15-1_amd64.deb
to main/f/fetchmail/fetchmail_6.3.15-1_amd64.deb
fetchmail_6.3.15.orig.tar.gz
to main/f/fetchmail/fetchmail_6.3.15.orig.tar.gz
fetchmailconf_6.3.15-1_all.deb
to main/f/fetchmail/fetchmailconf_6.3.15-1_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Nico Golde <[email protected]> (supplier of updated fetchmail package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 03 Apr 2010 19:57:08 +0200
Source: fetchmail
Binary: fetchmail fetchmailconf
Architecture: source all amd64
Version: 6.3.15-1
Distribution: unstable
Urgency: low
Maintainer: Fetchmail Maintainers <[email protected]>
Changed-By: Nico Golde <[email protected]>
Description:
fetchmail - SSL enabled POP3, APOP, IMAP mail gatherer/forwarder
fetchmailconf - fetchmail configurator
Closes: 140631 215688 569207
Changes:
fetchmail (6.3.15-1) unstable; urgency=low
.
* New upstream release.
- Log an unexpected BYE from the server when using imap
(Closes: #140631, #215688).
* Removing Hectors NEWS entry as it was a plain copy of the changelog
(Closes: #569207).
* Remove 03_sdump_heap_overflow.patch, included upstream.
* Switch to 3.0 (quilt) source format.
* Fix incorrect version number in NEWS file: 6.3.6.rc3-1 -> 6.3.6~rc3-1.
Checksums-Sha1:
9dcd27c530a8a8bb55a8ebb9cd3c77457e804f7d 1353 fetchmail_6.3.15-1.dsc
40cac33265684fa313a5b17cdf7afa50a5ce6824 2231145 fetchmail_6.3.15.orig.tar.gz
8fbc7bc7776ad79a3365823d99da61bac30db7a8 49113 fetchmail_6.3.15-1.debian.tar.gz
29d52770e11584a44c3ee2789854110da2d1a6b0 65194 fetchmailconf_6.3.15-1_all.deb
0dff54409cd210cf429c078607cdcf5423e16f96 902876 fetchmail_6.3.15-1_amd64.deb
Checksums-Sha256:
181530beb088a08c23f7e56dc60f410baff756cd39ebaba2050ad93d297393f9 1353
fetchmail_6.3.15-1.dsc
18d782af0050bf3d733eddc505da7f7d8c36d805c509b066a190398fafd835a7 2231145
fetchmail_6.3.15.orig.tar.gz
089503246ac8e5a9fb1ed64af7d4e48583cea7d4fabd55088af4db5f367d295e 49113
fetchmail_6.3.15-1.debian.tar.gz
d78a012528f435bcc1bb5b5a31b47ef78cbe0e37adb67623e5da872647237180 65194
fetchmailconf_6.3.15-1_all.deb
4e49d8e014f7e5c73d9f6c2d3ec123f2ed9a721191a39963212e0c5beb347b80 902876
fetchmail_6.3.15-1_amd64.deb
Files:
f29962b62bdcb9f7ad13b6998e83b173 1353 mail optional fetchmail_6.3.15-1.dsc
d9a3fea3f835ce8e691ed98e7818c642 2231145 mail optional
fetchmail_6.3.15.orig.tar.gz
5ee8a084fe625caa755a5411c4513e4c 49113 mail optional
fetchmail_6.3.15-1.debian.tar.gz
e7f920da4adcbc347a363073057e0aea 65194 mail optional
fetchmailconf_6.3.15-1_all.deb
c6e65d7ac5091b83cad05c16667227d3 902876 mail optional
fetchmail_6.3.15-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAku3g1AACgkQHYflSXNkfP9tlQCfTCkJaXr800R4muElQCEjNOld
FRYAnAsxbn8QxmDb9yxVjQOLUx9Flnl8
=roDS
-----END PGP SIGNATURE-----
--- End Message ---
