From unknown Sun Jun 22 08:07:26 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#49966] [PATCH] gnu: fetchmail: Update to 6.4.21 [fixes CVE-2021-36386]. Resent-From: Xinglu Chen Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 09 Aug 2021 17:49:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 49966 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 49966@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16285313038650 (code B ref -1); Mon, 09 Aug 2021 17:49:02 +0000 Received: (at submit) by debbugs.gnu.org; 9 Aug 2021 17:48:23 +0000 Received: from localhost ([127.0.0.1]:57709 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mD9Nu-0002FS-UV for submit@debbugs.gnu.org; Mon, 09 Aug 2021 13:48:23 -0400 Received: from lists.gnu.org ([209.51.188.17]:57034) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mD9Ns-0002FH-JP for submit@debbugs.gnu.org; Mon, 09 Aug 2021 13:48:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40704) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mD9Ns-0007w4-B2 for guix-patches@gnu.org; Mon, 09 Aug 2021 13:48:20 -0400 Received: from h87-96-130-155.cust.a3fiber.se ([87.96.130.155]:45542 helo=mail.yoctocell.xyz) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mD9Nq-0003sP-4L for guix-patches@gnu.org; Mon, 09 Aug 2021 13:48:20 -0400 From: Xinglu Chen DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=yoctocell.xyz; s=mail; t=1628531289; bh=AUmZkW2Rqm49STD5ClEoU9uJbelWJyi539XSV2Dd6BI=; h=From:To:Subject:Date; b=CETkbfvesuJrNciqjXClLdZKhjpkIQJEtn7epMPOpohYesxn2j1bNtkaosVrvhmu6 PJ+ZArrLiAWr/sUAfY+iSndrTSLU/hvgKSo37nhdxsO20kaSD8efycEigUx45sGSDE olZycyUpJxdrvxJQq5xND5WOVeTQCEtrdZRPzoPk= Message-Id: <2675b9e873f52d8382bfe6cc572b0d2af6b49fdf.1628531272.git.public@yoctocell.xyz> Date: Mon, 09 Aug 2021 19:48:09 +0200 MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=87.96.130.155; envelope-from=public@yoctocell.xyz; helo=mail.yoctocell.xyz X-Spam_score_int: 18 X-Spam_score: 1.8 X-Spam_bar: + X-Spam_report: (1.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_SUSPICIOUS_NTLD=0.498, FROM_SUSPICIOUS_NTLD_FP=0.372, PDS_OTHER_BAD_TLD=1.997, PDS_RDNS_DYNAMIC_FP=0.001, RDNS_DYNAMIC=0.982, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.7 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: * gnu/packages/mail.scm (fetchmail): Update to 6.4.21. --- gnu/packages/mail.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 3e162bd28b..13761fa4b3 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -498,7 +498,7 @@ to run without any changes.") [...] Content analysis details: (1.7 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: yoctocell.xyz (xyz)] 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/, medium trust [209.51.188.17 listed in list.dnswl.org] -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.51.188.17 listed in wl.mailspike.net] 0.5 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.2 (/) * gnu/packages/mail.scm (fetchmail): Update to 6.4.21. --- gnu/packages/mail.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 3e162bd28b..13761fa4b3 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -498,7 +498,7 @@ to run without any changes.") (define-public fetchmail (package (name "fetchmail") - (version "6.4.20") + (version "6.4.21") (source (origin (method url-fetch) @@ -506,7 +506,7 @@ to run without any changes.") (version-major+minor version) "/" "fetchmail-" version ".tar.xz")) (sha256 - (base32 "0xk171sbxcwjh1ibpipryw5sv4sy7jjfvhn5n373j04g5sp428f8")))) + (base32 "07cxr5137hvrk8jfgn4wd6sq9361c3d40w8krnjxm8fpmwf9qiba")))) (build-system gnu-build-system) (inputs `(("openssl" ,openssl))) base-commit: 30289f4d4638452520f52c1a36240220d0d940ff -- 2.32.0 From unknown Sun Jun 22 08:07:26 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Xinglu Chen Subject: bug#49966: closed (Re: [bug#49966] [PATCH] gnu: fetchmail: Update to 6.4.21 [fixes CVE-2021-36386].) Message-ID: References: <2675b9e873f52d8382bfe6cc572b0d2af6b49fdf.1628531272.git.public@yoctocell.xyz> X-Gnu-PR-Message: they-closed 49966 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 49966@debbugs.gnu.org Date: Mon, 09 Aug 2021 19:18:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1628536682-17206-1" This is a multi-part message in MIME format... ------------=_1628536682-17206-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #49966: [PATCH] gnu: fetchmail: Update to 6.4.21 [fixes CVE-2021-36386]. which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 49966@debbugs.gnu.org. --=20 49966: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D49966 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1628536682-17206-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 49966-done) by debbugs.gnu.org; 9 Aug 2021 19:17:37 +0000 Received: from localhost ([127.0.0.1]:57821 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mDAmH-0004St-AP for submit@debbugs.gnu.org; Mon, 09 Aug 2021 15:17:37 -0400 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:60669) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mDAmF-0004Sg-4x for 49966-done@debbugs.gnu.org; Mon, 09 Aug 2021 15:17:36 -0400 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 97B7E5C00B8; Mon, 9 Aug 2021 15:17:29 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute5.internal (MEProxy); Mon, 09 Aug 2021 15:17:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=tGo/u+qb35IcHZkwgb4skieM VXWQXG7uNGy7H5ayK48=; b=KOIr5xb46RW3Qswnri/fzqldOLKV1S7RNAiTgXsD 29K6Rx0rJK75junAEIdweKaIotPXcXL2mr9ppZ52CmyERr2J8bFYXSUCiTfoeMHa Ph/1Ecx81Wwoo/vAQGs8ABDtuhRPovRe+nafMiBuF9N3imM3mNO8TH05z2dtxk1p Q/M= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=tGo/u+ qb35IcHZkwgb4skieMVXWQXG7uNGy7H5ayK48=; b=bx0SF27LYjpeSSJrSM+DV/ XAyZ2DRNZzmuc5rW0wwPeJv0qpCtUOhfZAm3Mdeu3KnraVIkKd6NUFVPMaiCTBnZ +WWa0ydanMnlFAabfaGUXLRrKWy2qLd8tumipTT+nFBM+GO92FzFuRC4kkI1aqeH ng7FqgYdJvGmYzQvwjjo1FnS5zihU9oRDycFpHxKUC7DyD33dpsKJAXcUlfGWpMa NZDC/wWZgcV0ruN6dquAioobuOsTz7GBBcT3yGKNnlY6qyoWsakivlCudbg5cCff BpQnW4IKYcqRF7jwOgqGQc1HYw0unBMUumTRqbq9QHLtE9Rq724Jj+V+M876LjoQ == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrjeejgddufeehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggujgesthdtre dttddtvdenucfhrhhomhepnfgvohcuhfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgr rhhirdhnrghmvgeqnecuggftrfgrthhtvghrnhepueekkedtffdvtddugeejgedtvefhue efiedvjeeitdeigedtveejvdejheffvefgnecuvehluhhsthgvrhfuihiivgeptdenucfr rghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 9 Aug 2021 15:17:28 -0400 (EDT) Date: Mon, 9 Aug 2021 15:17:27 -0400 From: Leo Famulari To: Xinglu Chen Subject: Re: [bug#49966] [PATCH] gnu: fetchmail: Update to 6.4.21 [fixes CVE-2021-36386]. Message-ID: References: <2675b9e873f52d8382bfe6cc572b0d2af6b49fdf.1628531272.git.public@yoctocell.xyz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2675b9e873f52d8382bfe6cc572b0d2af6b49fdf.1628531272.git.public@yoctocell.xyz> X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 49966-done Cc: 49966-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On Mon, Aug 09, 2021 at 07:48:09PM +0200, Xinglu Chen wrote: > * gnu/packages/mail.scm (fetchmail): Update to 6.4.21. Thanks! Pushed as f4bf6165deec25cf45151cb60c1ee71f8506cfd4 ------------=_1628536682-17206-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 9 Aug 2021 17:48:23 +0000 Received: from localhost ([127.0.0.1]:57709 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mD9Nu-0002FS-UV for submit@debbugs.gnu.org; Mon, 09 Aug 2021 13:48:23 -0400 Received: from lists.gnu.org ([209.51.188.17]:57034) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mD9Ns-0002FH-JP for submit@debbugs.gnu.org; Mon, 09 Aug 2021 13:48:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40704) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mD9Ns-0007w4-B2 for guix-patches@gnu.org; Mon, 09 Aug 2021 13:48:20 -0400 Received: from h87-96-130-155.cust.a3fiber.se ([87.96.130.155]:45542 helo=mail.yoctocell.xyz) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mD9Nq-0003sP-4L for guix-patches@gnu.org; Mon, 09 Aug 2021 13:48:20 -0400 From: Xinglu Chen DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=yoctocell.xyz; s=mail; t=1628531289; bh=AUmZkW2Rqm49STD5ClEoU9uJbelWJyi539XSV2Dd6BI=; h=From:To:Subject:Date; b=CETkbfvesuJrNciqjXClLdZKhjpkIQJEtn7epMPOpohYesxn2j1bNtkaosVrvhmu6 PJ+ZArrLiAWr/sUAfY+iSndrTSLU/hvgKSo37nhdxsO20kaSD8efycEigUx45sGSDE olZycyUpJxdrvxJQq5xND5WOVeTQCEtrdZRPzoPk= To: guix-patches@gnu.org Subject: [PATCH] gnu: fetchmail: Update to 6.4.21 [fixes CVE-2021-36386]. Message-Id: <2675b9e873f52d8382bfe6cc572b0d2af6b49fdf.1628531272.git.public@yoctocell.xyz> Date: Mon, 09 Aug 2021 19:48:09 +0200 MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=87.96.130.155; envelope-from=public@yoctocell.xyz; helo=mail.yoctocell.xyz X-Spam_score_int: 18 X-Spam_score: 1.8 X-Spam_bar: + X-Spam_report: (1.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_SUSPICIOUS_NTLD=0.498, FROM_SUSPICIOUS_NTLD_FP=0.372, PDS_OTHER_BAD_TLD=1.997, PDS_RDNS_DYNAMIC_FP=0.001, RDNS_DYNAMIC=0.982, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.7 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: * gnu/packages/mail.scm (fetchmail): Update to 6.4.21. --- gnu/packages/mail.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 3e162bd28b..13761fa4b3 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -498,7 +498,7 @@ to run without any changes.") [...] Content analysis details: (1.7 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: yoctocell.xyz (xyz)] 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/, medium trust [209.51.188.17 listed in list.dnswl.org] -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.51.188.17 listed in wl.mailspike.net] 0.5 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.2 (/) * gnu/packages/mail.scm (fetchmail): Update to 6.4.21. --- gnu/packages/mail.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm index 3e162bd28b..13761fa4b3 100644 --- a/gnu/packages/mail.scm +++ b/gnu/packages/mail.scm @@ -498,7 +498,7 @@ to run without any changes.") (define-public fetchmail (package (name "fetchmail") - (version "6.4.20") + (version "6.4.21") (source (origin (method url-fetch) @@ -506,7 +506,7 @@ to run without any changes.") (version-major+minor version) "/" "fetchmail-" version ".tar.xz")) (sha256 - (base32 "0xk171sbxcwjh1ibpipryw5sv4sy7jjfvhn5n373j04g5sp428f8")))) + (base32 "07cxr5137hvrk8jfgn4wd6sq9361c3d40w8krnjxm8fpmwf9qiba")))) (build-system gnu-build-system) (inputs `(("openssl" ,openssl))) base-commit: 30289f4d4638452520f52c1a36240220d0d940ff -- 2.32.0 ------------=_1628536682-17206-1--