This is another version from the release candidate series. The reason
for immediately releasing this version is a buffer overflow in the
text/enriched handler which can be triggered by means of
suitably-formatted e-mail messages. Thus, we recommend you upgrade
your mutt installations immediately.
fetchmail-5.1.0 (Wed Sep 22 01:27:42 EDT 1999):
* CRAM-MD5 code now doublequotes usernames with embedded spaces. This will
probably fail (the RFCs don't support quoting) but it's better than nothing
and works with at least one server.
* Federico G. Schwindt's fix for NetBSD/OpenBSD --with-kerberos.
* auth keyword and option changed to preauth.
* Correct the exit value when .fetchmailrc permissions are wrong.
* getmail/gotmail scripts by Thomas Nesges added to contrib.
* Guenther H. Leber's fix for a potential uid.c buffer overflow.
* Todd Sabin's option to force IMAP authentication type; enables working
around some broken servers.
fetchmail-5.0.8 (Tue Sep 14 06:56:50 EDT 1999):
* Todd Sabin's patch to accept spaces in CRAM-MD5 names.
* Fix to CRAM endianness patch, by Dan Root via Lawrence Rogers.
* Suppress duplicates by message ID in multidrop mode.
* NTLM support for querying Microsoft Exchange servers, from Grant Edwards.
* Lexer fix by Brian Boutel.
Quick guide for compiling packages:
- set KERBEROS=4 or KERBEROS=5 in /etc/mk.conf
Quick guide for configuring Kerberos support in a package Makefile:
- test for KERBEROS value and enable the appropriate version with
CONFIGURE_ARGS or other means and set USE_KERBEROS=yes
- make sure to disable Kerberos support otherwise (especially if
using configure, which might automatically detect it)
- BUILD_DEFS and RESTRICTED are set automatically in bsd.pkg.mk
when USE_KERBEROS=yes is set
Incompatible changes with postfix-19990906
==========================================
- On systems that use user.lock files to protect system mailboxes
against simultaneous updates, Postfix now uses /file/name.lock
files while delivering to files specified in aliases/forward/include
files. This is a no-op when the recipient lacks directory write
permission.
- The LDAP client code no longer looks up a name containing "*"
because it could be abused. See the LDAP_README file for how to
restore previous behavior.
- The Postfix to PCRE interface now expects PCRE version 2.08.
Postfix is no longer compatible with PCRE versions prior to 2.06.
Major changes with postfix-19990906
===================================
Several bugfixes, none related to security. See the HISTORY file
for a complete list of changes.
- Postfix is now distributed under IBM Public License Version 1.0
which does not carry the controversial termination clause. The new
license does have a requirement that contributors make source code
available.
- INSTALL.sh install/upgrade procedure that replaces existing
programs and shell scripts instead of overwriting them, and that
leaves existing queue files and configuration files alone.
- The ugly Delivered-To: header can now be turned off selectively.
The default setting is: "prepend_delivered_header = command, file,
forward". Turning off the Delivered-To: header when forwarding
mail is not recommended.
- mysql client support by Scott Cotton and Joshua Marcus, Internet
Consultants Group, Inc. See the file MYSQL_README for instructions.
- reject_unauth_destination SMTP recipient restriction that rejects
destinations not in $relay_domains. Unlike the check_relay_domains
restriction, reject_unauth_destination ignores the client hostname.
By Lamont Jones of Hewlett-Packard.
- reject_unauth_pipelining SMTP *anything* restriction to stop mail
from spammers that improperly use SMTP command pipelining to speed
up their deliveries.
- Postfix "sendmail" now issues a warning and drops privileges if
installed set-uid root.
- No more duplicate delivery when "postfix reload" is immediately
followed by "sendmail -q".
- No more "invalid argument" errors when a Postfix daemon opens a
DB/DBM file while some other process is changing the file.
- Portability to the Mac OS X Server, Reliant Unix, AIX 3.2.5 and
Ultrix 4.3.
Against 1.0pre1, there are several build changes (building this
version of mutt with SGI's cc should work), and back-ports of
IMAP-related bug fixes from the unstable branch.
Almost all changes from 0.95.7 concern the build process, which
should work now on those platforms for which problems where reported
with 0.95.7. postfix and qmail users may be interested in the new
$bounce_delivered configuration variable.
fetchmail-5.0.7 (Sat Aug 21 04:26:13 EDT 1999):
* RPA support works again.
* Added debian_rc startup/shutdown script to contrib/.
* Yet another monitor option fix.
* Variouas small option-processing fixes.
* Teach fetchmailconf about HP OpenMail.
* SunOS compilation fixes.
* Steve Dodd's fix to not send bouncemail on transient errors.
* Don Willis's improved UID parsing.
* Fetchmail now logs and recovers from SIGPIPE errors produced by broken
socket streams or MDAs. The current poll cycle is terminated.
- The $in_reply_to configuration variable is gone. The In-Reply-To
header currently only contains the message-id of the message to
which the reply refers. This is to make sure that this header is
correctly formatted.
- Lots of bugs present in 0.95.6 were fixed.
