After 6 years of inactivity, fetchmail 6.4.0 is available

More than 6 years since the last update saw the light e-mail delivery and forwarding software release fetchmail 6.4.0, which allows you to pick up mail using the POP2, POP3, RPOP, APOP, KPOP, IMAP, ETRN and ODMR protocols and extensions, filter received mail, distribute messages from one account to several users and redirect to local mailboxes or via SMTP to another server (work as a POP/IMAP-to-SMTP gateway). The project code is written in C language and spreads licensed under GPLv2. The fetchmail 6.3.X branch has been completely discontinued.

Among changes:

  • Added support for TLS 1.1, 1.2 and 1.3 (-sslproto {tls1.1+|tls1.2+|tls1.3+}). Build with OpenSSL is enabled by default (requires at least branch 1.0.2 for operation, and 1.3 for TLSv1.1.1). Support for SSLv2 has been dropped. By default, STLS/STARTTLS declares TLSv3 instead of SSLv1.0 and TLSv1.1. Reverting SSLv3 requires using OpenSSL with SSLv3 support left and running fetchmail with the "--sslproto ssl3+" flag.
  • By default, the SSL certificate verification mode is enabled (-sslcertck). To disable the check, you now explicitly need to specify the "--nosslcertck" option;
  • Dropped support for very old C compilers. Build now requires a compiler that supports the 2002 SUSv3 standard (Single Unix Specification v3, a subset of POSIX.1-2001 with XSI extensions);
  • Improved efficiency of tracking UID ("-keep UID" mode) when distributing messages from a mailbox over POP3;
  • Numerous improvements related to the support of encrypted connections have been made;
  • Addressed a vulnerability that could lead to a buffer overflow in the GSSAPI authentication code when manipulating usernames that are longer than 6000 characters.

Supplement: available release 6.4.1 fixing two regressions (an incomplete fix for Debian bug 941129 caused fetchmail config files to not be found in some cases and a problem with _FORTIFY_SOURCE when PATH_MAX is greater than the minimum _POSIX_PATH_MAX).

Source: opennet.ru

Add a comment