Th. Klein
2011-Aug-22 09:00 UTC
[Secure-testing-team] Bug#638823: [claws-mail] POP-SSL defunct after upgrade of libgnutls26
Package: claws-mail
Version: 3.7.9-1
Severity: important
Tags: security
X-Debbugs-CC: secure-testing-team at lists.alioth.debian.org
--- Please enter the report below this line. ---
Using claws-mail for about half a year, I am unable to use SSL with
POP3 for fetching my emails for more than a week now.
Disabling SSL fetches als email as always, however this is not viable
from a security point of view.
The log file (POP+SSL) says:
---- Begin: Claws-Mail log file ----
* Connecting to POP3 server: pop.gmx.net...
[21:02:24] POP3< +OK POP server ready H migmx105
[21:02:24] POP3> USER <username>
[21:02:24] POP3< +OK password required for user "<username>"
[21:02:24] POP3> PASS ********
[21:02:24] POP3< +OK mailbox "<username>" has 2280 messages
(207473193 octets) H migmx105 [21:02:24] POP3> STAT
[21:02:24] POP3< +OK 2280 207473193
[21:02:24] POP3> UIDL
[21:02:24] POP3< +OK
[21:02:24] POP3> LIST
[21:02:24] POP3< +OK
** Session timed out. You may be able to recover by increasing the
timeout value in Preferences/Other/Miscellaneous.
---- End: Claws-Mail log file ----
Timeout value is set to 20 seconds.
I suppose the issue is an upgrade within libgnutls26; I am not too
technical, but these links might be helpful for you:
1.) bug report: claws relying on deprecated commands of gnutls
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624062
2.) bug report: behaviour of gnutls26 changed, problems with claws-mail
https://savannah.gnu.org/support/index.php?107660
I have claws-mail-dbg package installed, yet to run gdb I need
help, and then I am willing to post the outpot here... :-)
Cheers,
Thomas
--- System information.
--- Architecture: i386
Kernel: Linux 3.0-1.slh.7-aptosid-686
Debian Release: wheezy/sid
500 unstable www.debian-multimedia.org
500 unstable cdn.debian.net
500 unstable aptosid.com
--- Package information. ---
Depends (Version) | Installed
====================================-+-=============libc6
(>= 2.7) | 2.13-16
libcairo2 (>= 1.2.4) | 1.10.2-6.1
libcompfaceg1 | 1:1.5.2-5
libdbus-glib-1-2 (>= 0.78) | 0.94-4
libenchant1c2a (>= 1.6) | 1.6.0-3
libetpan15 (>= 1.0) | 1.0-4
libgcrypt11 (>= 1.4.6) | 1.4.6-9
libgdk-pixbuf2.0-0 (>= 2.22.0) | 2.23.5-3
libglib2.0-0 (>= 2.24.0) | 2.28.6-1
libgnutls26 (>= 2.9.11-0) | 2.12.7-6
libgtk2.0-0 (>= 2.20.0) | 2.24.5-4
libice6 (>= 1:1.0.0) | 2:1.0.7-2
libldap-2.4-2 (>= 2.4.7) | 2.4.25-3
libpango1.0-0 (>= 1.14.0) | 1.28.4-3
libpisock9 | 0.12.5-4
libsm6 | 2:1.2.0-2
xdg-utils | 1.1.0~rc1-2
Recommends (Version) | Installed
=======================================-+-==========claws-mail-i18n
|
xfonts-100dpi | 1:1.0.3
OR xfonts-75dpi | 1:1.0.3
OR xfonts-100dpi-transcoded | 1:1.0.3
OR xfonts-75dpi-transcoded | 1:1.0.3
aspell-en | 7.1-0-1
OR aspell-dictionary |
Suggests (Version) | Installed
================================-+-===========claws-mail-doc (= 3.7.9-1) |
www-browser |
gedit |
OR kwrite | 4:4.6.5-1
OR mousepad |
OR nedit |
claws-mail-tools |