• https://downloads.sourceforge.net/sourceforge/fetchmail/ (Download)

• (2020-04-16) Updated to version: fetchmail-6.4.3
• (2020-02-15) Updated to version: fetchmail-6.4.2
• (2020-01-27) Updated to version: fetchmail-6.4.1
• (2014-06-25) Updated to version: fetchmail-6.3.26
• (2013-01-14) Updated to version: fetchmail-6.3.24
• (2011-08-23) Updated to version: fetchmail-6.3.21
• (2011-06-06) Updated to version: fetchmail-6.3.20
• (2010-06-09) Updated to version: fetchmail-6.3.17p0
• (2010-05-19) Updated to version: fetchmail-6.3.17
• (2010-04-01) Updated to version: fetchmail-6.3.15

Log message:
update to fetchmail-6.4.3

Log message:
update to fetchmail-6.4.2

Log message:
update to fetchmail-6.4.1

Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes

Log message:
Update gettext to 0.20.1.
Follow the upstream recommendations for packagers and switch to
multi-packages:
devel/gettext       -> devel/gettext,-runtime
devel/gettext-tools -> devel/gettext,-tools
(new)                  devel/gettext,-textstyle

Log message:
Do not overrun plugin string when copying it.  Prevents sporadic
segmentation fault in fetchmail.  Fix reported to upstream.
OK jca@

Log message:
a few minor pkg_subst fixes, for the coming patch (disallow -c without -m
outside of WRKDIR)

Log message:
Bump some ports which reference if_msghdr in their source, so that package
updates are triggered. This is following the struct if_data ABI change a few
days ago; if_msghdr has an embedded if_data.  Some may be unnecessary, but
some are definitely needed and bumps are cheaper than debugging.
Problem reported with wpa_supplicant by Mikolaj Kucharski.

Log message:
Fixed upstream.

Log message:
cope if SSLv3 is disabled

Log message:
remove a whole bunch more @rm -f cases

Log message:
update fetchmail to 6.3.20, tested by jasper@, lots of fixes including:
* CVE-2011-1947
- use timeouts for IMAP STARTTLS/POP3 STLS negotiation which could cause
fetchmail freezes if a server was hanging.
* security improvements to defang X.509 certificate abuse
- require wildcard CN/subject alternative names to start with "*." not just "*"
- don't allow wildcards to match domain literals (such as 10.9.8.7) or
wildcards in domain literals ("*.168.23.23").
- don't allow wildcarding top-level domains.

Log message:
new depends

Log message:
fix tabs

Log message:
USE_GROFF=Yes

Log message:
SECURITY FIX
Resolves fetchmail-SA-2010-01
patch from upstream

Log message:
Add patch from upstream to fix bogus ssl check warning when the
sslfingerprint option is used.
hints and ok sthen@

Log message:
Update to 6.3.17
ok kili@

Log message:
- update fetchmail to 6.3.15
from charles smith, thanks.

Log message:
security update to 6.3.14, heap overflow in verbose mode SSL cert display
on signed char arch. http://www.fetchmail.info/fetchmail-SA-2010-01.txt
"This might be exploitable to inject code if
- - fetchmail is run in verbose mode
AND
- - the host running fetchmail considers char signed
AND
- - the server uses malicious certificates with non-printing characters
that have the high bit set
AND
- - these certificates manage to inject shell-code that consists purely of
printable characters.
It is believed to be difficult to achieve all this."

Log message:
update to 6.3.13, fixing a regression introduced in 6.3.12. ok jasper@

Log message:
SECURITY FIX
Resolves CVE-2009-2666:
Detect malicious certificates that use a null byte injection in the
Common Name or subjectAltName (CVE-2009-2666).
patch from debian

Log message:
SECURITY FIX
Resolves CVE-2009-2666:
Detect malicious certificates that use a null byte injection in the
Common Name or subjectAltName (CVE-2009-2666).
patch from debian
ok jasper@

Log message:
SECURITY update to 6.3.12, fixes CVE-2009-2666 (bad handling of nulls
in SSL domain names).  ok jasper@

Log message:
- update fetchmail to 6.3.9
ok sthen@

Log message:
Fix stunnel usage with TLS1 encryption.
From https://lists.berlios.de/pipermail/fetchmail-users/2007-December/001396.html
via Dieter Rauschenberger. Thank you!
Regen PLIST and drop maintainership. I don't use it anymore.

Log message:
Remove the pre-generated yacc files so they will be re-build.
This fixes a problem with gcc2. Also fix a format string.
From miod@, thanks!

Log message:
SECURITY FIX for http://secunia.com/advisories/30742/
(Fetchmail Large Header Processing Denial of Service)
Patch was taken from upstream advisory.
http://www.fetchmail.info/fetchmail-SA-2008-01.txt
ok bernd@ (MAINTAINER)

Log message:
Remove surrounding quotes in COMMENT*/PERMIT_*

Log message:
MFC (original commit rui@):
roll in a distribution patch which fixes CVE-2007-4565
Reference: http://securitytracker.com/alerts/2007/Aug/1018627.html
ok sturm@

Log message:
MFC (original commit rui@):
roll in a distribution patch which fixes CVE-2007-4565
Reference: http://securitytracker.com/alerts/2007/Aug/1018627.html
ok sturm@

Log message:
SECURITY: roll in a distribution patch which fixes CVE-2007-4565
Reference: http://securitytracker.com/alerts/2007/Aug/1018627.html
ok bernd@

Log message:
MFC:
Security update to fetchmail-6.3.8. (CVE-2007-1558)
Make the APOP challenge parser more distrustful and have it reject challenges
that do not conform to RFC-822 msg-id format, in the hope to make mounting
man-in-the-middle attacks (MITM) against APOP a bit more difficult.
Detailed information:
http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt

Log message:
MFC:
Security update to fetchmail-6.3.8. (CVE-2007-1558)
Make the APOP challenge parser more distrustful and have it reject challenges
that do not conform to RFC-822 msg-id format, in the hope to make mounting
man-in-the-middle attacks (MITM) against APOP a bit more difficult.
Detailed information:
http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt

Log message:
MFC:
Security update to fetchmail-6.3.8. (CVE-2007-1558)
Make the APOP challenge parser more distrustful and have it reject challenges
that do not conform to RFC-822 msg-id format, in the hope to make mounting
man-in-the-middle attacks (MITM) against APOP a bit more difficult.
Detailed information:
http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt

Log message:
Security update to fetchmail-6.3.8. (CVE-2007-1558)
Make the APOP challenge parser more distrustful and have it reject challenges
that do not conform to RFC-822 msg-id format, in the hope to make mounting
man-in-the-middle attacks (MITM) against APOP a bit more difficult.
Detailed information:
http://fetchmail.berlios.de/fetchmail-SA-2007-01.txt

Log message:
base64 checksums.

Log message:
MFC:
Security update to fetchmail-6.3.6:
A password disclosure vulnerability (CVE-2006-5867, fetchmail's using unsafe
logins or omitting TLS) and a denial of service vulnerability (CVE-2006-5974,
fetchmail crashes, dereferencing the null page, when rejecting a message sent
to an MDA).
Fetchmail 6.3.6 also fixes several regressions and long-standing bugs.
Details:
https://lists.berlios.de/pipermail/fetchmail-announce/2007-January/000042.html

Log message:
MFC:
Security update to fetchmail-6.3.6:
A password disclosure vulnerability (CVE-2006-5867, fetchmail's using unsafe
logins or omitting TLS) and a denial of service vulnerability (CVE-2006-5974,
fetchmail crashes, dereferencing the null page, when rejecting a message sent
to an MDA).
Fetchmail 6.3.6 also fixes several regressions and long-standing bugs.
Details:
https://lists.berlios.de/pipermail/fetchmail-announce/2007-January/000042.html

Log message:
Security update to fetchmail-6.3.6:
A password disclosure vulnerability (CVE-2006-5867, fetchmail's using unsafe
logins or omitting TLS) and a denial of service vulnerability (CVE-2006-5974,
fetchmail crashes, dereferencing the null page, when rejecting a message sent
to an MDA).
Fetchmail 6.3.6 also fixes several regressions and long-standing bugs.
Details:
https://lists.berlios.de/pipermail/fetchmail-announce/2007-January/000042.html
tests & ok jasper@, simon@

Log message:
Use MASTER_SITE_BERLIOS

Log message:
Update to fetchmail-6.3.4.

Log message:
Update to fetchmail-6.3.3.

Log message:
update to fetchmail 6.2.5.5, fixing CVE-2005-3088 and CVE-2005-4348
from bernd@

Log message:
update to fetchmail 6.2.5.5, fixing CVE-2005-3088 and CVE-2005-4348
from bernd@

Log message:
Update to fetchmail-6.3.2.
This update includes security fixes for CVE-2005-2335, CVE-2005-4348
and CVE-2006-0321.
Take over maintainership. (With permission from old MAINTAINER fgsch@.)
Tested by Sigfred Heversen and aanriot@.
ok aanriot@, brad@

Log message:
MFC:
Fix the latest security issue in fetchmailconf.
http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt
"passwords are written to a world-readable file"
ok brad@

Log message:
MFC:
Fix the latest security issue in fetchmailconf.
http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt
"passwords are written to a world-readable file"
ok brad@

Log message:
MFC:
Fix the latest security issue in fetchmailconf.
http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt
"passwords are written to a world-readable file"
ok brad@

Log message:
Fix the latest security issue in fetchmailconf.
http://fetchmail.berlios.de/fetchmail-SA-2005-02.txt
"passwords are written to a world-readable file"
nicer fetchmailconf diff & ok fgsch@ (thanks!)

Log message:
bump PKGNAME so that 3.7 won't have higher PKGNAMEs than 3.8
suggested by espie@, ok pval@

Log message:
updated packages for these ports where not build in a sane environment
bump PKGNAME for fixed packages

Log message:
updated packages for these ports where not build in a sane environment
bump PKGNAME for fixed packages

Log message:
SECURITY FIX: update to 6.2.5.2, see
http://www.vuxml.org/openbsd/aee27100-fcf2-11d9-b3c7-00065bd5b0b6.html.
Update master sites and homepage (project moved to belios.de).
From Bernd Ahlers <b dot ahlers at ba-net dot org>.
ok brad@

Log message:
SECURITY FIX: update to 6.2.5.2, see
http://www.vuxml.org/openbsd/aee27100-fcf2-11d9-b3c7-00065bd5b0b6.html.
Update master sites and homepage (project moved to belios.de).
From Bernd Ahlers <b dot ahlers at ba-net dot org>.
ok brad@

Log message:
SECURITY FIX: update to 6.2.5.2, see
http://www.vuxml.org/openbsd/aee27100-fcf2-11d9-b3c7-00065bd5b0b6.html.
Update master sites and homepage (project moved to belios.de).
From Bernd Ahlers <b dot ahlers at ba-net dot org>.

Log message:
- Fix libintl detection
- Don't use bundled libintl headers
- Bump PKGNAME

Log message:
SIZE

Log message:
Add WANTLIB markers

Log message:
new style plists.

Log message:
new-style MODULES.

Log message:
fix apop. from alexander dot bluhm at gmx dot net via PR/3709.
pvalchev@ ok.

Log message:
remove WWW lines

Log message:
update to 6.2.5.

Log message:
out of bounds access; detected by malloc guard; ok fgsch@

Log message:
update to fetchmail 6.2.4; bugfix release.

Log message:
update to fetchmail 6.2.3.

Log message:
no more kerberosIV stuff; reported and tested by krw.

Log message:
update to fetchmail 6.2.2.

Log message:
remove double word stuttering
ok pvalchev@ brad@

Log message:
new MASTER_SITES and HOMEPAGE.
from by Joseph C. Bender <jcbender at benderhome dot net>.

Log message:
MFC:
SECURITY FIX: update to fetchmail 6.2.0.

Log message:
MFC:
SECURITY FIX: update to fetchmail 6.2.0.

Log message:
SECURITY FIX: update to fetchmail 6.2.0.

Log message:
Update to fetchmail 6.1.3.

Log message:
update to fetchmail 6.1.2.

Log message:
No regression tests available.

Log message:
update to fetchmail 6.1.1.

Log message:
upgrade to fetchmail 6.1.0
- fixes a few buffer overflows and a broken boundary check
which could potentially lead to a remote vulnerability.
http://marc.theaimsgroup.com/?l=bugtraq&m=103340148625187&w=2
--
Ok'd by: fgsch@

Log message:
upgrade to fetchmail 6.1.0
- fixes a few buffer overflows and a broken boundary check
which could potentially lead to a remote vulnerability.
http://marc.theaimsgroup.com/?l=bugtraq&m=103340148625187&w=2
--
Ok'd by: pvalchev@

Log message:
update to 6.0.0.

Log message:
- update to fetchmail 5.9.14.
- remove deprecated NEED_VERSION.
- enable NTLM support as requested by Nick Nauwelaerts <nick@wanadoo.be>.
- add gettext to MODULES.