Your message dated Mon, 06 May 2019 21:48:32 +0000
with message-id <e1hnltn-000bs4...@fasolo.debian.org>
and subject line Bug#927709: fixed in libetpan 1.9.3-2
has caused the Debian Bug report #927709,
regarding libetpan: GnuTLS timeouts are 1000 times shorter than configured
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
927709: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927709
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libetpan
Severity: important
Tags: upstream
Dear Maintainer,
Testing https://delta.chat/ on Debian Buster, I noticed IMAP connection
failures. After some debugging, I have tracked it down to a problem in upstream
libetpan when built against a new-enough GnuTLS. PR for that here:
https://github.com/dinhviethoa/libetpan/pull/330
The outcome of this bug is that SSL negotiation timeouts are 1,000 times less
than they should be - Delta's 10 second timeout becomes 10ms. The default 30
second timeout becomes 30ms, which might *just* be long enough in some cases,
but certainly not all.
I'm opening a Debian bug report as I'd like the fix to be included in Debian
Buster. Otherwise, all software that uses libetpan (including Claws email, I
believe) will fail to negotiate TLS in seemingly-random circumstances. It's a
one-line fix, the consequences of which are very easy to understand.
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-0.bpo.2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=C.UTF-8 (charmap=locale: Cannot set
LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=locale: Cannot set LC_MESSAGES to default
locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory
UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect
--- End Message ---
--- Begin Message ---
Source: libetpan
Source-Version: 1.9.3-2
We believe that the bug you reported is fixed in the latest version of
libetpan, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 927...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ricardo Mones <mo...@debian.org> (supplier of updated libetpan package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 06 May 2019 23:27:54 +0200
Source: libetpan
Binary: libetpan-dev libetpan-doc libetpan20 libetpan20-dbgsym
Architecture: source amd64 all
Version: 1.9.3-2
Distribution: unstable
Urgency: high
Maintainer: Ricardo Mones <mo...@debian.org>
Changed-By: Ricardo Mones <mo...@debian.org>
Description:
libetpan-dev - mail handling library - development files
libetpan-doc - mail handling library - API documentation
libetpan20 - mail handling library
Closes: 927709
Changes:
libetpan (1.9.3-2) unstable; urgency=high
.
* debian/patches/90_fix_tls_timeout.diff
- Add upstream patch to fix TLS timeout (Closes: #927709)
* Raised changelog urgency because of serious bug
Checksums-Sha1:
305e3dbe6d0c4fd17d725d99cc693e498f7d0b5c 2119 libetpan_1.9.3-2.dsc
ef88d6071b0bcab21d45554aeffd8dd0235e141f 22736 libetpan_1.9.3-2.debian.tar.xz
c4d173f84f267eaafd2b7612d63d49927a000a4a 397584 libetpan-dev_1.9.3-2_amd64.deb
d2d5e8d2376c02a650f3a3a7ee098245a0553289 105296 libetpan-doc_1.9.3-2_all.deb
f537283e431591e8882e335d7e014452510c43d3 1387428
libetpan20-dbgsym_1.9.3-2_amd64.deb
bf2c532a696999c3afceb3f6ecd3d71ea4284658 315492 libetpan20_1.9.3-2_amd64.deb
62a9434055f9929a6bd4cafa05db6aa9bbc9acd2 7722 libetpan_1.9.3-2_amd64.buildinfo
Checksums-Sha256:
59fabce6d6a5a0d5e4eeb4dcf5e5f93c5804f89d475ecf070f60f4457f6b20bb 2119
libetpan_1.9.3-2.dsc
0b9c2d64cb005566cbc1f438391657be83b17469d978a73b550af348bebfdcf1 22736
libetpan_1.9.3-2.debian.tar.xz
b49fdad3f571b2199c5554791f4da1ff9369947f611cdcd5f2d5d4386711f8bb 397584
libetpan-dev_1.9.3-2_amd64.deb
1e2dcc760373ba4a571cdb3b43d7182e50da61886e6e89fa721e3fe19fc536fb 105296
libetpan-doc_1.9.3-2_all.deb
9b2625fc02d784a1483ea49897c5d7f814d49e401f48ca4c53fc949c94aaef57 1387428
libetpan20-dbgsym_1.9.3-2_amd64.deb
4072682aa52fc32018fedca2f23c8b72c0e5a1f064572071060a030cd65b328c 315492
libetpan20_1.9.3-2_amd64.deb
0b06e1ddc68c9ba53c609de1d1758bba0231578d01928bf7e38088e22d0b8b55 7722
libetpan_1.9.3-2_amd64.buildinfo
Files:
a434bae224079a7b0d908f10781fbb0d 2119 mail optional libetpan_1.9.3-2.dsc
c2007c9a06669d4cac5b1a9dd2c29145 22736 mail optional
libetpan_1.9.3-2.debian.tar.xz
abf1ee08023a05e44bb9db78eb76d231 397584 libdevel optional
libetpan-dev_1.9.3-2_amd64.deb
fa1ad89b70200922e1eedb6bbfdb8675 105296 doc optional
libetpan-doc_1.9.3-2_all.deb
195f0ea27c37d8503798034ca207c8bf 1387428 debug optional
libetpan20-dbgsym_1.9.3-2_amd64.deb
ab625914530b135fe8a5492092559173 315492 libs optional
libetpan20_1.9.3-2_amd64.deb
7b1864557707139bd2aa196b7e93cda3 7722 mail optional
libetpan_1.9.3-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=w2Dz
-----END PGP SIGNATURE-----
--- End Message ---
