Re: proposal: remove support for gmime2.4

diff --git a/6c/9beacd5cae80cc806910be7208f8efb86f9f02 b/6c/9beacd5cae80cc806910be7208f8efb86f9f02
new file mode 100644 (file)
index 0000000..525a3d0
--- /dev/null
+++ b/6c/9beacd5cae80cc806910be7208f8efb86f9f02
@@ -0,0 +1,89 @@
+Return-Path: <dkg@fifthhorseman.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+       by olra.theworths.org (Postfix) with ESMTP id CAAF2431FD5\r
+       for <notmuch@notmuchmail.org>; Thu, 15 Jan 2015 11:47:40 -0800 (PST)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: 2.438\r
+X-Spam-Level: **\r
+X-Spam-Status: No, score=2.438 tagged_above=-999 required=5\r
+       tests=[DNS_FROM_AHBL_RHSBL=2.438] autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+       by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+       with ESMTP id eBK4HUKXbWEV for <notmuch@notmuchmail.org>;\r
+       Thu, 15 Jan 2015 11:47:37 -0800 (PST)\r
+Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])\r
+       by olra.theworths.org (Postfix) with ESMTP id 8E024431FBC\r
+       for <notmuch@notmuchmail.org>; Thu, 15 Jan 2015 11:47:37 -0800 (PST)\r
+Received: from fifthhorseman.net (unknown [38.109.115.130])\r
+       by che.mayfirst.org (Postfix) with ESMTPSA id 2B7ABF984;\r
+       Thu, 15 Jan 2015 14:47:30 -0500 (EST)\r
+Received: by fifthhorseman.net (Postfix, from userid 1000)\r
+       id 2AE4320152; Thu, 15 Jan 2015 14:47:36 -0500 (EST)\r
+From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>\r
+To: David Bremner <david@tethera.net>, notmuch@notmuchmail.org\r
+Subject: Re: proposal: remove support for gmime2.4\r
+In-Reply-To: <87387c9wg0.fsf@maritornes.cs.unb.ca>\r
+References: <87387c9wg0.fsf@maritornes.cs.unb.ca>\r
+User-Agent: Notmuch/0.18.2 (http://notmuchmail.org) Emacs/24.4.1\r
+       (x86_64-pc-linux-gnu)\r
+Date: Thu, 15 Jan 2015 14:47:32 -0500\r
+Message-ID: <87k30n3jxn.fsf@alice.fifthhorseman.net>\r
+MIME-Version: 1.0\r
+Content-Type: multipart/signed; boundary="=-=-=";\r
+       micalg=pgp-sha512; protocol="application/pgp-signature"\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+       <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Thu, 15 Jan 2015 19:47:40 -0000\r
+\r
+--=-=-=\r
+Content-Type: text/plain\r
+\r
+On Thu 2015-01-15 05:20:47 -0500, David Bremner wrote:\r
+> It seems no very recent system has gmime2.4. I guess several of these\r
+> gmime2.4 only code paths are both security critical (e.g. in crypto.c)\r
+> and mostly untested.\r
+>\r
+> Is there good reason to keep supporting gmime 2.4?\r
+\r
+gmime 2.6 is available in squeeze-backports, which is about as old as\r
+anyone can reasonably expect to run an end-user system these days in my\r
+book.  I have no objection to dropping gmime 2.4 support.\r
+\r
+       --dkg\r
+\r
+--=-=-=\r
+Content-Type: application/pgp-signature; name="signature.asc"\r
+\r
+-----BEGIN PGP SIGNATURE-----\r
+Version: GnuPG v1\r
+\r
+iQJ8BAEBCgBmBQJUuBlVXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w\r
+ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQjk2OTEyODdBN0FEREUzNzU3RDkxMUVB\r
+NTI0MDFCMTFCRkRGQTVDAAoJEKUkAbEb/fpcKeUP/3hyHX61PJCN4pKPidrLlIqK\r
+Y9NoynuRZLoorPNrSWEkNSXMbuq0/0jDVlnGokZp7hQlaB1VFVuAWF0oAiLycFEH\r
+E+LfOqaAS9MKzbtRPmbPIjvhJ2iv80TSPbvBSj1qAIV6HdLcrLlcE/4LAqyKfa/y\r
+mc6ZrMEc1YNuDdj3UoYJOuOeRudxl0F0IR/x24WPSxYDToFTw7JXSlcrijQp4MTT\r
+ZD4GdM8SVfhpjNWjdx/20hJyn3x2YiF5iNrHVPnE1YlVQs6Nf7B2pqacI73srfYA\r
+snY6d9xiHSGylkOmHcnLG1okkLRqx/bvWX3YSFuVAG01bxclofQFtLp/h6OEvAg6\r
+fw3jjkan1NNaOOUS9YZFh5oWiIeerH2NOhpZdgDtfTeNxt3qYzYGl4UWPr8xIdpf\r
+V0H3ZX+dRdNb/MCUnEUVtQ7VA7o+zNDIdlYFjhmBi9xSkMBqNqhVQYUI+4Z82OYf\r
+7zqkjQo7fWKldvjj92CZzMbqNxTtpF+7Z6ltFOytH27rh9PzvGXInQXxXX3l5HVW\r
+7B5YlTcTpmm6Q93x+NUKiq31rqbf/l7RjqLE7c7zzlyfRXztRQrs/31kiujGErhJ\r
+lQ6rQWODwlbaaZMQ+9hwizR6hcnpNS2s0Cuqik+93beF+18ythccXbGMfCtsDb2P\r
+3jklKsD8dP+hwG0Cf2N1\r
+=KF9r\r
+-----END PGP SIGNATURE-----\r
+--=-=-=--\r