From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4cfCHj5fJcz2yHd for ; Sat, 04 Oct 2025 17:31:13 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R13" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4cfCHf3PPgz2xS5 for ; Sat, 04 Oct 2025 17:31:10 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4cfCHd0Wrdz1GW; Sat, 04 Oct 2025 17:31:09 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1759599069; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=Ls1Pog9HCgWhf3HfcRo72m5uoY7MIGxB6UdQa3I0gRM=; b=g4RbX+YPDnSmQYhTAK886KDj/Cj1Dh76RMTdDCAYpfWFW0U/hU5LnVEn6Fs3HYL5ss4kc+ IYgIaeXb6kAEYWBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1759599069; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=Ls1Pog9HCgWhf3HfcRo72m5uoY7MIGxB6UdQa3I0gRM=; b=rGoi/FT6OxYrYwRIEdwPgPBDZZfqbdmkedAkrhNQbOrLSHw9nv2MKcn5jh1bSJIEUMVfYg U9U/b2mK+ipNCMHcmaiY1ywfxhF/IrhYTU3GrsOnydqdO7fpcBu0gekb1DXK2ekBGvaQwE HMF7wFdcfw443XtPeW30T4ceDj6rltqS/XPZEuFe1sdT8bPnZ+o0eSRwY2g8UgH4wwOICQ 6JrvlJ35Zpt4l14iqKEflSuLQucY5UBHS8GKIU0HRCJfl7iFIEUUO9VrvTU6/7HjUPToC5 bvX14cKZY+GD123f9x7gGqcb+a9ZTXtEUy+3PVtUTKUtP9ynQN492i6X4tVjYQ== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] fetchmail: Update to version 6.5.5 Date: Sat, 4 Oct 2025 19:31:06 +0200 Message-ID: <20251004173106.3985535-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - Update from version 6.5.4 to 6.5.5 - Update of rootfile not required - Changelog 6.5.5 LICENSING CHANGE OF WOLFSSL: * Note that wolfSSL 5.8.2 switched license from GPLv2 to GPLv3, so if a distribution links fetchmail against wolfSSL, this implies the use of the "or-any-later-version" clause of the GPLv2-or-later licensed material in fetchmail, and the combined work can also only ship as GPLv3. This may or may not apply to later versions of wolfSSL - be sure to check! BUGFIXES: ==-- note that these comprise C23 compatibility fixes (GCC 15) --== * Support t.operation when the running user is different from the one mentioned in the $USER variable. Fix courtesy of Corey Halpin. * The kerberos*_auth() functions for v4 and v5 have prototypes now, so they can be compiled by the most modern C compilers. * AC_TYPE_* type-checking macros seem unnecessary, strip them, also from config.h.meson which would not fill them from build.meson. We expect the operating system to provide us pid_t, size_t, uint32_t. * Our res_search() autoconf check was broken on compilers adhering to newer standards (C23), for instance GCC 15, disabling several DNS-based features in autotools-based builds, but not meson-based builds. Strip the bogus "extern int res_search();" declaration without prototype, we would need to have the prototype from the system either way. IMPORTANT CHANGE: * Fetchmail is now more careful to actually clear password and like buffers in memory, so that is less likely that other processes could access them should they happen to access similar memory regions after fetchmail's exit. Fetchmail now uses memset_explicit(), explicit_bzero(), or its own explicit_bzero() implementation to clear memory buffers that contain passwords or like secrets, or their base64 equivalents, and also buffers that it uses to visualize such strings, instead of just using memset(). The motivating reason is that a plain memset() that does not have /observable/ effects, i. e. when we do not read from the buffer or transfer it, can be removed by the compiler's optimizer in the so-called dead store elimination, voiding our attempt to clear the buffer contents before releasing it to the heap. The named alternative functions are not being optimized away. WORKAROUND: * IMAP: Recognize SASL_IR advertisement of Cyrus IMAP 3.10.0...3.12.? as synonymous to SASL-IR per RFC4959. Upstream bug reported at https://github.com/cyrusimap/cyrus-imapd/issues/5481 - and it was quickly fixed in all their supported branches by patch releases. CHANGES: * Several documentation tweaks. * As long as SOURCE_DATE_EPOCH is set, the source tarball build may be reproducible now. Tested on Fedora 42. * The Japanese translation [ja] has been updated by Takeshi Hamasaki. * The Makefile should be compatible across a wider set of make implementations, beyond GNU make. Signed-off-by: Adolf Belka --- lfs/fetchmail | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/fetchmail b/lfs/fetchmail index fcdd83664..3a04ba881 100644 --- a/lfs/fetchmail +++ b/lfs/fetchmail @@ -26,7 +26,7 @@ include Config SUMMARY = Full-Featured POP and IMAP Mail Retrieval Daemon -VER = 6.5.4 +VER = 6.5.5 THISAPP = fetchmail-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = fetchmail -PAK_VER = 20 +PAK_VER = 21 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = f443ff50244c78de82974612a615983e175d78288705ec95b982244d595185790dbecd43e10de0d917f677fe4a6c8df88d60bd96e7ef871067d91561e9a4f9c3 +$(DL_FILE)_BLAKE2 = 73d7dafb33dd6d8efd70c4d4ab7cb6d43d8fc41b66eef9facdd2ac27300e9ff94b0a40b5c49d6fa6a91bd0625243f6805f7dbc681e851ead9910d2507914d16e install : $(TARGET) -- 2.51.0