Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 531180 - =mail-client/claws-mail-3.11.1 stable request
Summary: =mail-client/claws-mail-3.11.1 stable request
Status: RESOLVED DUPLICATE of bug 525588
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Keywording and Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Christian Faulhammer (RETIRED)
URL:
Whiteboard:
Keywords: STABLEREQ
Depends on:
Blocks:
 
Reported: 2014-11-29 21:32 UTC by Christian Tietz
Modified: 2014-12-09 20:13 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Tietz 2014-11-29 21:32:27 UTC 
Not yet 30 days in the repository, however, since SSLv3 support has been dropped for good reason by various major email providers during the past weeks/months, all previous versions in portage are virtually rendered useless. Hence, I would already like to start the stabilization process.

Complete list would be:

=dev-libs/libdbusmenu-12.10.2
=dev-libs/libindicate-12.10.1
=mail-client/claws-mail-3.11.1

Reproducible: Always
Comment 1 Christian Tietz 2014-11-29 22:27:55 UTC 
I would like to add that I am running these on an otherwise stable amd64 environment without any issues; previously in my local overlay since the moment claws-mail-3.11.1 was released.
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2014-11-30 13:06:31 UTC 
Why would it be useless? What 3.11.1 does is change the defaults to prefer TLS, which still works fine with all those e-mail providers.
Comment 3 Christian Tietz 2014-11-30 20:10:46 UTC 
SSL handshake fails when using <mail-client/claws-mail-3.11 and attempting to connect to email providers that have disabled SSLv3 due to POODLE vulnerability. I ran into this issue with both gmx.net and t-online.de. There is also a workaround [1] available, however, it is probably more convenient for most users to simply upgrade to the latest version.

[1] http://lists.claws-mail.org/pipermail/users/2014-October/011046.html
Comment 4 Alexander Tsoy 2014-11-30 20:43:50 UTC 
Another option is to backport 2 patches mentioned in bug 525588 [1] to claws-mail-3.10.1 and stabilize that version instead.

https://bugs.gentoo.org/show_bug.cgi?id=525588#c1
Comment 5 Alexander Tsoy 2014-11-30 20:50:39 UTC 
(In reply to Alexander Tsoy from comment #4)
First patch fixes problem with direct SSL/TLS mentioned by Christian. Current stable claws-mail support TLS 1.0-1.2 out of the box only when using STARTTLS. Second patch disables SSLv3.
Comment 6 Jeroen Roovers (RETIRED) gentoo-dev 2014-12-09 20:13:10 UTC 

*** This bug has been marked as a duplicate of bug 525588 ***