Commit graph

5386 commits

Author SHA1 Message Date
David Bremner
151b2c3747 test/emacs: add exploit mitigation test
This test will pass if either the notmuch show mitigation code is
working correctly, or upstream emacs mime handling code has it's own
fix for https://bugs.gnu.org/28350.
2017-12-08 20:36:20 -04:00
Tomi Ollila
f55e9a3bda emacs: letf enriched-decode-display-prop for text/enriched display
Dynamically bind enriched-decode-display-prop when inserting
text/enriched part. This complements commit 9b05823838 for
emacs versions before 24.4 which do not have advice-add
functionality.

Since emacs 25.3 this particular bug is fixed.
2017-12-08 20:35:41 -04:00
Daniel Kahn Gillmor
cb855d8a9d crypto: signature verification reports valid User IDs
When i'm trying to understand a message signature, i care that i know
who it came from (the "validity" of the identity associated with the
key), *not* whether i'm willing to accept the keyholder's other
identity assertions (the "trust" associated with the certificate).

We've been reporting User ID information based on the "trust"
associated with the certificate, because GMime didn't clearly expose
the validity of the User IDs.

This change relies on fixes made in GMime 3.0.3 and later which
include https://github.com/jstedfast/gmime/pull/18.
2017-12-08 20:35:18 -04:00
David Bremner
83f2661363 debian: changelog for 0.25.2-1 2017-11-05 20:06:23 -04:00
David Bremner
42871517c6 version: bump to 0.25.2 2017-11-05 19:59:30 -04:00
David Bremner
58bf820b78 NEWS for 0.25.2 2017-11-05 19:54:40 -04:00
Jani Nikula
cd3f5e1a93 cli/crypto: fix segfault on failed gmime2 crypto context creation
Commit 1fdc08d0ff ("cli/crypto: treat failure to create a crypto
context as fatal.") started treating crypto context creation failures
"as fatal", returning NULL from _mime_node_create().

Unfortunately, we do not have NULL checks for _mime_node_create()
failures. The only caller, mime_node_child(), could check and return
NULL (as it's documented to do on errors) but none of the several call
sites have NULL checks either. And none of them really have a trivial
but feasible and graceful way of recovery.

So while the right thing to do would be to handle NULL returns
properly all over the place, and we have other scenarios that do
return NULL from above mentioned functions, the crypto context
creation failure is something that does seem to show up regularly in
some scenarios, revert back to the functionality before commit
1fdc08d0ff as an interim fix.
2017-11-05 15:41:13 -04:00
David Bremner
949c27144e debian: changelog stanza for 0.25.1-1 2017-09-11 22:22:22 -03:00
David Bremner
aeeb966f95 NEWS: news entry for 0.25.1 2017-09-11 22:20:26 -03:00
David Bremner
0fa257cb74 version: bump to 0.25.1 2017-09-11 22:19:46 -03:00
Jani Nikula
9b05823838 emacs: override enriched-decode-display-prop for text/enriched display
Switch to a local version of enriched-decode-display-prop if we
encounter a text/enriched part. This is to mitigate
https://bugs.gnu.org/28350. Normally it would be prudent to remove the
override afterwards, but in this case just leave it in.

Notes from db:
      This doesn't disable text/enriched, just one feature of it.
2017-09-11 22:08:01 -03:00
David Bremner
d7b5db32c3 debian: start changelog for next debian upload 2017-08-16 21:38:26 -03:00
Daniel Kahn Gillmor
34e5d4d31a do not use bullets in debian/NEWS
see lintian's debian-news-entry-uses-asterisk for justification
2017-08-16 21:36:06 -03:00
Daniel Kahn Gillmor
56f2f362e1 remove obsolete lintian-override (see https://bugs.debian.org/865055) 2017-08-16 21:34:36 -03:00
David Bremner
6354745dcd debian: actually stop shipping 50notmuch.el 2017-08-15 07:52:47 -03:00
David Bremner
68dc19659a debian upload 0.25-5
fix typo in -4
2017-08-10 06:44:07 -04:00
David Bremner
cdfeeda5e4 debian: upload 0.25-4
replace notmuch-emacs with elpa-emacs as a recommend
2017-08-04 18:15:09 -04:00
David Bremner
479b14570b debian: changelog stanza for 0.25-3 2017-08-03 10:43:28 -04:00
David Bremner
0187785414 debian: add maintainer scripts to remove old startup file
We do it for notmuch and notmuch-emacs because the history is a bit
unclear. It seems to be safe to call when that conffile is not owned
by a given package
2017-08-03 10:42:54 -04:00
David Bremner
81125aca51 debian: update gmime dependencies
- build against gmime 3.0 by preference
- drop gmime-2.4-dev, no longer supported upstream
2017-07-26 11:00:31 -04:00
David Bremner
9f648dfbb8 debian: add changelog entry for 0.25 2017-07-25 07:30:24 -04:00
David Bremner
409f768c91 NEWS: set date 2017-07-25 07:24:11 -04:00
David Bremner
7a4c60e446 version: bump to 0.25 2017-07-25 07:21:29 -04:00
David Bremner
3cb823628c NEWS: formatting fixups
These are from Tomi, split from the previous commit
2017-07-25 07:16:20 -04:00
Tomi Ollila
d25f3603e8 NEWS for release 0.25: Emacs: support for stashing message timestamp 2017-07-25 07:15:45 -04:00
David Bremner
d95ccfe979 debian: changelog for 0.25~rc1-2 2017-07-18 19:48:12 -03:00
David Bremner
2a0b123ea6 debian: finalize changelog for 0.25~rc1-1 2017-07-18 07:12:12 -03:00
David Bremner
b8ccfe342d version: bump to 0.25~rc1 2017-07-18 07:04:29 -03:00
David Bremner
33e7441fb8 debian: allow emacs25 as a build depend
It's a bit crazy to require emacs 24 installed just to build, when it
isn't required to run.
2017-07-18 06:57:39 -03:00
David Bremner
1d82110f83 emacs: convert remaining format-versions from 3 to 4
This is needed for consistent beheviour between notmuch built against
gmime-2.6 and gmime-3.0 w.r.t. error reporting.
2017-07-18 06:57:26 -03:00
Daniel Kahn Gillmor
d55fffffd7 fix the generated documentation output 2017-07-18 06:53:57 -03:00
Daniel Kahn Gillmor
87bdfbc91f Fix orthography 2017-07-18 06:50:44 -03:00
Daniel Kahn Gillmor
f0b91832c2 use modern debian/copyright 2017-07-18 06:46:02 -03:00
Daniel Kahn Gillmor
02b19c3193 avoid false lintian warning about "iff" 2017-07-18 06:45:18 -03:00
Daniel Kahn Gillmor
5b6d1d720e resolve lintian tag debhelper-but-no-misc-depends notmuch-emacs
This is likely not strictly necessary given that notmuch-emacs is a
transitional package.  But having a simple consistency until we
eventually remove the transitional notmuch-emacs package seems ok too,
and fewer arbitrary lintian warnings will make real lintian warnings
more visible.
2017-07-18 06:44:10 -03:00
Daniel Kahn Gillmor
c3e282fb9b fix Python capitalization 2017-07-18 06:43:18 -03:00
Daniel Kahn Gillmor
19e3089211 explicitly mark notmuch-emacs as transitional 2017-07-18 06:42:32 -03:00
Daniel Kahn Gillmor
44914dc60e Bump standards version to 4.0.0 (no changes needed)
Some things that might be interesting (and are acceptable and
supported under 4.0.0, though not required) are:

 * supporting DEB_BUILD_OPTIONS tag nodoc wihle tagging build-deps (we
   could put python-sphinx into <!nodoc>, for example)

 * splitting out Build-Depends-Arch from Build-Depends
2017-07-18 06:42:07 -03:00
Daniel Kahn Gillmor
be381073c0 Drop duplicate Section header for notmuch-vim
Resolves lintian binary-control-field-duplicates-source
2017-07-18 06:40:52 -03:00
David Bremner
4765590c6d NEWS: drop redundant mention of dump fix
This actually happened in 0.24.x.
2017-07-18 06:36:31 -03:00
David Bremner
4c6e3d83fb uploaded to experimental
-----BEGIN PGP SIGNATURE-----
 
 iQGzBAABCAAdFiEE3VS2dnyDRXKVCQCp8gKXHaSnniwFAllsqxEACgkQ8gKXHaSn
 niwuOwv/QXqdRMfxpztcrOBFJi0HBzm6MB9dJiq6u8S738mYrLy8th16OAuI48ol
 6S/3g9CBAkMhUcg0CguIE7F2x/8w4IweMS7daBk0xhwzdzb5GczmDbgiIfvFG5v6
 PCiqFeqqc3fbhQ583KzvJOQRhRCGkR4qOpkyt3Ho8n4bkXOVawKzOs6+dsWc0X4/
 Xx8n+DZmCU1EOfZkOHCM2yU0Y7H7Hf//ZYbuttJ8gMEYzT0TqCDRNv6mrAoIEXso
 0z+yWYNhhJGqO5xVnCFf6hIxYXJ6TZam32bPkpuNK00OrEKouRQsmJ47d/0L8E17
 fCO9itYdIVKpOHMyKwY0brL+4p8quCz9xexbjeierMPM5MnqvBpR3KAfAyhC8HSH
 K2mZOLP4To1T1uV6ndSwxOec4WHYWfOWXR4FjjGGd/7hDmPGN4W0xsSC5QHeKJd2
 wGcK82Bz+2Hs55xiE4rhfW7IE7Nu0oQluVcI9bbuPu/Zh7ow8hfD6Pu31cZkMuxl
 /KOpFde4
 =W2A/
 -----END PGP SIGNATURE-----

Merge tag 'debian/0.25_rc0-2'

merge 32 bit compilation fix
2017-07-17 09:20:10 -03:00
David Bremner
3891036eee debian: changelog stanza for 0.25~rc0-2 2017-07-17 08:50:08 -03:00
David Bremner
d2c3a0a3a8 util: make g_mime_utils_header_decode_date_unix match prototype
The problem shows up on 32 bit architectures where sizeof(time_t) !=
sizeof(gint64).  Upcasting the 32 bit time_t to a 64 bit integer
should hopefully be safe.
2017-07-17 08:47:18 -03:00
David Bremner
470f74d401 NEWS: Initial writeup for my contributions to 0.25 2017-07-16 22:43:11 -03:00
David Bremner
6e1cc3986d notmuch 0.25~rc0 release
-----BEGIN PGP SIGNATURE-----
 
 iQGzBAABCAAdFiEE3VS2dnyDRXKVCQCp8gKXHaSnniwFAllrU1QACgkQ8gKXHaSn
 niy/pAwAjJrxW+nuTdgcZg6pTvhajHHlRFNGEH1hU4UlYzUVoYAjdkGOURhOXCTj
 zXbIJ07FLrdUtsmBqTZIc1yeiN5y0D2CM7M2hYBXH8UPaXhDJEODgrZmGu5yvFxw
 2i8Fxp9sMkZXznsfvk9KJgYKHT0jbfAojKUv8pEUyI9bmxqLXdYwqCP3weiTJHmQ
 8q0T5V2Kp37JuWoZkanWKT/kMmjXCB+uFOvWKXRsfB6Zh8f8/cNikjHizRhHDHCF
 bev4kdyXwSFMwrCNy/pu6N7bg7PSGISE1Q3CGV/3B/N+D+RHp2mzmSzR5/swc6Qr
 QA6AuAIeeEe/HW/VsJzzbdnnrWmpvN2HYEf124h2tF+gBrAL0vEgHirfJgX4Ttgu
 L6+RwwQxRvFXclu1MU+oXx0KOPKGs5ARjfyXzYPD0mf7Vbcboy9ZMppF9BtRfF1o
 nYc0f4xtdGbIQvsB1db+tEAFUZHMubP5bN8ZajJKFc5ITceXuTnvLb8duVpM4Bxm
 NKtYVdVd
 =rcEm
 -----END PGP SIGNATURE-----

Merge tag '0.25_rc0'

notmuch 0.25~rc0 release
2017-07-16 09:08:39 -03:00
David Bremner
952a0f0cda debian: note two closed bugs in changelog 2017-07-16 08:49:06 -03:00
David Bremner
f2d3f15770 debian: don't create obsolete bash completion dir 2017-07-16 08:45:55 -03:00
David Bremner
a453f2b52c debian: set distribution to experimental, finalize changelog 2017-07-16 08:35:35 -03:00
David Bremner
d5fedadff4 debian: add more c++ gunk to symbols file 2017-07-16 08:18:19 -03:00
David Bremner
0832fbfca8 debian: bump changelog version, mention SONAME bump 2017-07-16 08:08:18 -03:00