Make macro expansions safer for VALID_ADDRESS and RBUF_WRITE.

[~andy/fetchmail] / NEWS

diff --git a/NEWS b/NEWS
index c9d0848183e857359531036b64eaa5aa83843608..86657c135caab49797bce462d553528f7e56c6ea 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -54,13 +54,38 @@ removed from a 6.4.0 or newer release.)
 
 --------------------------------------------------------------------------------
 
-fetchmail-6.3.19 (not yet released):
+fetchmail-6.3.20 (not yet released):
+
+# CHANGES
+* fetchmail no longer supports SSL v2, nor the corresponding SSL2 option to
+  --sslproto. SSLv2 is insecure and had been deprecated 15 years ago. fetchmail
+  will actively forbid SSLv2 negotiation by means of SSL_OP_NO_SSLv2.
+  To fix Debian Bug#622054.
+* fetchmail now always uses its own MD5 implementation.  The library and header
+  variants are too diverse, and we've been bitten before -- and configure
+  complains noisily on Cyrus-SASL's RFC1321 md5.h.
+* fetchmail now supports an environment variable to suppress marking deleted
+  messages as seen at the same time, FETCHMAIL_IMAP_DELETED_REMAINS_UNSEEN.
+  See the manual page for details. Requested by Jonathan Buschmann.
+
+# BUG FIXES
+* Call strlen() only once when removing CRLF from a line. (Sunil Shetye)
+* Do not search for UNSEEN messages in ranges. Usually, there are very few new
+  messages and most of the range searches result in nothing. Instead, split the
+  long response to make the IMAP driver think that there are multiple lines of
+  response. (Sunil Shetye)
+
+# TRANSLATION UPDATES
+  [ja]    Japanese (Takeshi Hamasaki)
+
+
+fetchmail-6.3.19 (released 2010-12-10, 25945 LoC):
 
 # ERRATUM NOTICE ISSUED
 * fetchmail 6.3.18 contains several bug fixes that were considered sufficiently
   grave to warrant the issue of an erratum notice, fetchmail-EN-2010-03.txt.
 
-# BUG FIXES:
+# BUG FIXES
 * When specifying multiple local multidrop lists, do not lose wildcard flag.
   (Affects "user foo is bar baz * is joe here")
 * In multidrop configurations, an asterisk can now appear anywhere in the list
@@ -79,12 +104,23 @@ fetchmail-6.3.19 (not yet released):
 * Demote GSSAPI verbose/debug syslog to INFO severity. Requested by Carlos E. R.
   and Derek Simkowiak via the fetchmail-users@ mailing list.
 * Do STARTTLS/STLS negotiation in IMAP/POP3 if it is mandatory even if the
-  server capabilities do not show support for upgradation to TLS. (Sunil Shetye)
+  server capabilities do not show support for upgradation to TLS.
+  To use this, configure --sslproto tls1. (Sunil Shetye)
+* IMAP: Understand empty strings as FETCH response, seen on Yahoo. Reported by
+  Yasin Malli to fetchmail-users@ 2010-12-10.
+  Note that fetchmail continues to expect literals as FETCH response for now.
 
-# DOCUMENTATION:
+# DOCUMENTATION
 * The manual page now links to IANA for GSSAPI service names.
 
-# KNOWN BUGS AND WORKAROUNDS:
+# TRANSLATION UPDATES
+  [cs]    Czech (Petr Pisar)
+  [fr]    French (Frédéric Marchal)
+  [de]    German
+  [it]    Italian (Vincenzo Campanella)
+  [pl]    Polish (Jakub Bogusz)
+
+# KNOWN BUGS AND WORKAROUNDS
   (this section floats upwards through the NEWS file so it stays with the
   current release information - however, it was stuck with 6.3.8 for a while)
 * fetchmail does not handle messages without Message-ID header well