archivemail/RELNOTES

51 lines
2.1 KiB
Plaintext
Raw Normal View History

Date: Fri, 03 Nov 2006 00:11:10 +0100
Subject: archivemail 0.7 released with security fixes
Hi folks,
archivemail 0.7.0 is ready for download. This release comes with many and
important fixes, some of which address security issues; I strongly recommend to
upgrade.
Despite the major version change, this is mostly a maintenance release, with
notable fixes in the IMAP code. There's actually just one new feature (size
stats, see below) if you don't count what in theory was already there, but just
didn't work. :-)
Okay, here are my pet items from the changelog, roughly ordered by priority:
* Fixed unsafe creation of temporary files in the test suite.
This addresses Debian bug #385253, and reading the BTS log, it seems this
issue was assigned CVE-2006-4245, although I cannot find any further
reference to that CVE. Note that the bug was initially reported to affect
archivemail itself, too. This is not correct.
* Fixed dotlocking race condition.
* IMAP was broken in v0.6.2 and is now working again.
* New feature: stats now report the total size of a mailbox and of the archived
messages therefrom.
* archivemail now writes valid mbox(5) archives and by default mangles From_
lines; the latter can be disabled with the new option --dont-mangle (see the
man page for the details; see also Debian bugs #250410 and #250402)
* archivemail finally converts on-the-wire CRLF to native EOL when saving
messages from an IMAP folder.
* Fixed IMAP --delete which never worked at all.
* Fixed IMAP --dry-run so it doesn't download all messages that would be
archived.
* Fixed IMAP --size which never worked at all.
* archivemail now requires Python version >= 2.3.
* Fixed unittest failures.
* Distributing man page with the tarball again and fixed distutils setup.
The changes in this release probably better had went into several minor
releases, when we would have something like v0.6.6 now, but I was carried away
with bugfixing...
In other news, archivemail has new maintainers, namely Peter Poeml and Nikolaus
Schulz (that's me, hi!). The former maintainer Brandon Knitter is currently not
active on the project.
Cheers,
Nikolaus