Hello community, here is the log from the commit of package imapfilter for openSUSE:Factory checked in at 2019-12-24 14:30:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/imapfilter (Old) and /work/SRC/openSUSE:Factory/.imapfilter.new.6675 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "imapfilter" Tue Dec 24 14:30:17 2019 rev:43 rq:759030 version:2.6.14 Changes: -------- --- /work/SRC/openSUSE:Factory/imapfilter/imapfilter.changes 2019-09-26 20:41:38.922476014 +0200 +++ /work/SRC/openSUSE:Factory/.imapfilter.new.6675/imapfilter.changes 2019-12-24 14:30:25.182589004 +0100 @@ -1,0 +2,6 @@ +Sat Nov 9 16:12:41 UTC 2019 - Arun Persaud <a...@gmx.de> + +- update to version 2.6.14 + * Bug fix; OpenSSL version mess up for SSL hostname validation. + +------------------------------------------------------------------- Old: ---- imapfilter-2.6.13.tar.gz New: ---- imapfilter-2.6.14.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ imapfilter.spec ++++++ --- /var/tmp/diff_new_pack.6cc3oz/_old 2019-12-24 14:30:26.682589730 +0100 +++ /var/tmp/diff_new_pack.6cc3oz/_new 2019-12-24 14:30:26.686589732 +0100 @@ -17,7 +17,7 @@ Name: imapfilter -Version: 2.6.13 +Version: 2.6.14 Release: 0 Summary: A mail filtering utility License: MIT ++++++ imapfilter-2.6.13.tar.gz -> imapfilter-2.6.14.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/imapfilter-2.6.13/NEWS new/imapfilter-2.6.14/NEWS --- old/imapfilter-2.6.13/NEWS 2019-09-16 23:51:21.000000000 +0200 +++ new/imapfilter-2.6.14/NEWS 2019-11-01 09:14:51.000000000 +0100 @@ -1,7 +1,10 @@ +IMAPFilter 2.6.14 - 1 Nov 2019 + - Bug fix; OpenSSL version mess up for SSL hostname validation. + IMAPFilter 2.6.13 - 17 Sep 2019 - Support for SSL hostname validation. -IMAPFilter 2.6.12 - 03 Oct 2018 +IMAPFilter 2.6.12 - 3 Oct 2018 - Support for Server Name Indication (SNI). - The searching methods return values are described in the config man page. - Example of using the enter_idle() function in the sample extend file. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/imapfilter-2.6.13/src/socket.c new/imapfilter-2.6.14/src/socket.c --- old/imapfilter-2.6.13/src/socket.c 2019-09-16 23:51:21.000000000 +0200 +++ new/imapfilter-2.6.14/src/socket.c 2019-11-01 09:14:51.000000000 +0100 @@ -143,7 +143,7 @@ goto fail; if (get_option_boolean("certificates")) { -#if OPENSSL_VERSION_NUMBER >= 0x10000010L +#if OPENSSL_VERSION_NUMBER >= 0x10100000L SSL_set_hostflags(ssn->sslconn, X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS); if (!SSL_set1_host(ssn->sslconn, ssn->server)) { @@ -160,7 +160,9 @@ ERR_error_string(ERR_get_error(), NULL)); goto fail; } -#else + + SSL_set_verify(ssn->sslconn, SSL_VERIFY_PEER, NULL); +#elif OPENSSL_VERSION_NUMBER >= 0x10002000L X509_VERIFY_PARAM *param = SSL_get0_param(ssn->sslconn); X509_VERIFY_PARAM_set_hostflags(param, X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS); @@ -171,8 +173,14 @@ ERR_error_string(ERR_get_error(), NULL)); goto fail; } -#endif + SSL_set_verify(ssn->sslconn, SSL_VERIFY_PEER, NULL); +#else + /* SSL server name / certificate peer name validation not + * supported as built-in functionality in OpenSSL versions + * earlier than 1.0.2 (OpenSSL 1.0.1* and before). + */ +#endif } SSL_set_fd(ssn->sslconn, ssn->socket); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/imapfilter-2.6.13/src/version.h new/imapfilter-2.6.14/src/version.h --- old/imapfilter-2.6.13/src/version.h 2019-09-16 23:51:21.000000000 +0200 +++ new/imapfilter-2.6.14/src/version.h 2019-11-01 09:14:51.000000000 +0100 @@ -3,7 +3,7 @@ /* Program's version number. */ -#define VERSION "2.6.13" +#define VERSION "2.6.14" /* Program's copyright. */ #define COPYRIGHT "Copyright (c) 2001-2019 Eleftherios Chatzimparmpas"